Lucene search
+L

662 matches found

RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.10 views

CVE-2025-48168

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through ...

7.1CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/21 8:14 p.m.20 views

CVE-2010-20123 Steinberg MyMP3Player <= 3.0.0.67 Buffer Overflow

Steinberg MyMP3Player version 3.0 build 3.0.0.67 is vulnerable to a stack-based buffer overflow when parsing .m3u playlist files. The application fails to properly validate the length of input data within the playlist, allowing a specially crafted file to overwrite critical memory structures and...

8.4CVSS0.00345EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2025/08/21 8:14 p.m.10 views

CVE-2010-20123 Steinberg MyMP3Player <= 3.0.0.67 Buffer Overflow

Steinberg MyMP3Player version 3.0 build 3.0.0.67 is vulnerable to a stack-based buffer overflow when parsing .m3u playlist files. The application fails to properly validate the length of input data within the playlist, allowing a specially crafted file to overwrite critical memory structures and...

8.4CVSS8AI score0.00345EPSS
SaveExploits0References7
NVD
NVD
added 2025/08/20 4:15 p.m.21 views

CVE-2010-20042

Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler SEH chain, allowing an attacker to hijack...

8.4CVSS0.00345EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2025/08/20 3:42 p.m.11 views

CVE-2010-20042 Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow

Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler SEH chain, allowing an attacker to hijack...

8.4CVSS6.2AI score0.00345EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/08/20 3:42 p.m.22 views

CVE-2010-20042 Xion Audio Player ≤ 1.0.126 Unicode Stack Buffer Overflow

Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler SEH chain, allowing an attacker to hijack...

8.4CVSS0.00345EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2025/08/20 3:42 p.m.11 views

CVE-2010-20042

Xion Audio Player versions 1.0.126 and prior are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler SEH chain, allowing an attacker to hijack...

8.4CVSS6.2AI score0.00345EPSS
SaveExploits1References4
CVE
CVE
added 2025/08/20 3:42 p.m.22 views

CVE-2010-20042

CVE-2010-20042 affects Xion Audio Player prior to version 1.0.126, which is vulnerable to a Unicode-based stack buffer overflow triggered by processing specially crafted .m3u playlists. The overflow overwrites the SEH chain, allowing an attacker to hijack execution flow and run arbitrary code. Im...

8.4CVSS6.2AI score0.00345EPSS
SaveExploits1References7
NVD
NVD
added 2025/08/20 8:15 a.m.28 views

CVE-2025-54056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.8...

7.1CVSS0.00228EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.6 views

CVE-2025-48168

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through ...

7.1CVSS0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 8:03 a.m.16 views

CVE-2025-48168 WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through ...

7.1CVSS0.00215EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:03 a.m.3 views

CVE-2025-48168 WordPress Apollo - Sticky Full Width HTML5 Audio Player <= 3.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Apollo - Sticky Full Width HTML5 Audio Player lbg-audio5-html5-shoutcast-sticky allows Reflected XSS.This issue affects Apollo - Sticky Full Width HTML5 Audio Player: from n/a through ...

7.1CVSS5.2AI score0.00215EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 8:03 a.m.28 views

CVE-2025-48168

CVE-2025-48168 applies to the WordPress plugin Apollo - Sticky Full Width HTML5 Audio Player. It describes a Reflected Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. Affected software/version: Apollo - Sticky Full Width HTML5 Audio ...

7.1CVSS5.9AI score0.00215EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 8:02 a.m.21 views

CVE-2025-54056 WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist lbg-audio2-html5 allows Reflected XSS.This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through = 3.5.8...

7.1CVSS0.00228EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:02 a.m.6 views

CVE-2025-54056 WordPress Responsive HTML5 Audio Player PRO With Playlist <= 3.5.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Responsive HTML5 Audio Player PRO With Playlist allows Reflected XSS. This issue affects Responsive HTML5 Audio Player PRO With Playlist: from n/a through 3.5.8...

7.1CVSS7.2AI score0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 8:02 a.m.26 views

CVE-2025-54056

CVE-2025-54056: Reflected XSS in LambertGroup Responsive HTML5 Audio Player PRO With Playlist due to improper input neutralization during page generation. Affected: WordPress plugin versions up to 3.5.8. Remediation: update to a version later than 3.5.8 (Patchstack/Red Hat/Wordfence references co...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.15 views

WordPress plugin Apollo - Sticky Full Width HTML5 Audio Player Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

7.1CVSS5.7AI score0.00215EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/20 12:00 a.m.10 views

Xion Audio Player 安全漏洞

Xion Audio Player is an audio player from Xion Audio Player, Inc. A security vulnerability exists in Xion Audio Player versions prior to 1.0.126, which stems from a Unicode-based stack buffer overflow when processing specially crafted .m3u playlist files, which could lead to the execution of...

8.4CVSS7.2AI score0.00345EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.14 views

PT-2025-34096

Name of the Vulnerable Software and Affected Versions Xion Audio Player versions prior to 1.0.126 Description A Unicode-based stack buffer overflow occurs when opening a specially crafted .m3u playlist file. The file contains an excessively long string that overwrites the Structured Exception...

8.4CVSS6.2AI score0.00345EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/08/20 12:00 a.m.9 views

PT-2025-34018 · Lambertgroup · Lambertgroup Responsive Html5 Audio Player Pro With Playlist

Name of the Vulnerable Software and Affected Versions: LambertGroup Responsive HTML5 Audio Player PRO With Playlist versions through 3.5.8 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Reflected Cross-site Scripting XSS...

7.1CVSS6.1AI score0.00228EPSS
SaveExploits0References5
Rows per page
Query Builder