Lucene search
+L

2469 matches found

CNNVD
CNNVD
added 2026/02/18 12:00 a.m.14 views

Alloksoft WMV to AVI MPEG DVD WMV Converter 安全漏洞

Alloksoft WMV to AVI MPEG DVD WMV Converter is a video format conversion tool developed by Alloksoft Corporation. Version 4.6.1217 of Alloksoft WMV to AVI MPEG DVD WMV Converter has a security vulnerability. This vulnerability arises from allowing excessively long license inputs, which may cause...

8.4CVSS5.8AI score0.00373EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2026/02/16 10:06 a.m.16 views

WordPress Converter for Media - Optimize images | Convert WebP & AVIF plugin <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src vulnerability

WordPress Converter for Media - Optimize images | Convert WebP & AVIF plugin = 6.5.1 - Unauthenticated Server-Side Request Forgery via src vulnerability discovered by Lucas Montes NiRoX in WordPress Plugin Converter for Media versions = 6.5.1...

4.8CVSS5.4AI score0.00238EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/14 1:26 a.m.11 views

CVE-2019-25318

AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text input. Attackers can craft a malicious payload that overwrites stack memory and triggers a bind shell on port 9999 when the 'Browse' button ...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/13 1:22 p.m.14 views

CVE-2026-1356

The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::loadimagesource function. This makes it possible for unauthenticated attackers to make web requests...

4.8CVSS5.7AI score0.00238EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/12 11:16 p.m.17 views

CVE-2019-25331

AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to...

8.4CVSS0.00152EPSS
SaveExploits0References3
NVD
NVD
added 2026/02/12 11:16 p.m.13 views

CVE-2019-25318

AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text input. Attackers can craft a malicious payload that overwrites stack memory and triggers a bind shell on port 9999 when the 'Browse' button ...

8.8CVSS0.00302EPSS
SaveExploits0References4
CVE
CVE
added 2026/02/12 10:48 p.m.24 views

CVE-2019-25331

CVE-2019-25331 affects AVS Audio Converter 9.1, featuring a local buffer overflow in the Exit folder input. A crafted text file with 264 bytes of padding followed by register overwrite values can compromise the application and potentially execute arbitrary code. The CVSS metrics indicate high imp...

8.4CVSS6.2AI score0.00152EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/12 10:48 p.m.8 views

CVE-2019-25331

AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to...

8.4CVSS6.2AI score0.00152EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/12 10:48 p.m.10 views

CVE-2019-25331 AVS Audio Converter 9.1 - 'Exit folder' Buffer Overflow

AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to...

8.4CVSS6.2AI score0.00152EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/12 10:48 p.m.28 views

CVE-2019-25318

The CVE describes a stack overflow in AVS Audio Converter 9.1.2.600 triggered by manipulating the output folder text input. A crafted payload can overwrite stack memory and execute arbitrary code, resulting in a bind shell on port 9999 when the Browse button is clicked. No remediation details are...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/12 10:48 p.m.5 views

CVE-2019-25318 AVS Audio Converter 9.1.2.600 - Stack Overflow

AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text input. Attackers can craft a malicious payload that overwrites stack memory and triggers a bind shell on port 9999 when the 'Browse' button ...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/12 10:48 p.m.6 views

CVE-2019-25318

AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text input. Attackers can craft a malicious payload that overwrites stack memory and triggers a bind shell on port 9999 when the 'Browse' button ...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/02/12 10:16 a.m.21 views

CVE-2026-1356

The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::loadimagesource function. This makes it possible for unauthenticated attackers to make web requests...

4.8CVSS0.00238EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/12 9:25 a.m.45 views

CVE-2026-1356

CVE-2026-1356 affects the WordPress plugin “Converter for Media – Optimize images | Convert WebP & AVIF” and its vulnerable scope includes all versions up to and including 6.5.1. The issue is a Server-Side Request Forgery (SSRF) via PassthruLoader::load_image_source, enabling unauthenticated atta...

4.8CVSS5.7AI score0.00238EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/12 9:25 a.m.9 views

CVE-2026-1356

The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::loadimagesource function. This makes it possible for unauthenticated attackers to make web requests...

4.8CVSS5.7AI score0.00238EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/12 9:25 a.m.8 views

CVE-2026-1356 Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src

The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::loadimagesource function. This makes it possible for unauthenticated attackers to make web requests...

4.8CVSS5.7AI score0.00238EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/12 9:25 a.m.38 views

CVE-2026-1356 Converter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src

The Converter for Media – Optimize images | Convert WebP & AVIF plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.5.1 via the PassthruLoader::loadimagesource function. This makes it possible for unauthenticated attackers to make web requests...

4.8CVSS0.00238EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/12 12:00 a.m.14 views

AVS4YOU AVS Audio Converter 安全漏洞

AVS4YOU AVS Audio Converter is a software application developed by AVS4YOU Corporation. It is used to convert audio files from one format to another at your discretion, and to save them onto a hard drive. Version 9.1.2.600 of AVS4YOU AVS Audio Converter has a security vulnerability; this...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/02/12 12:00 a.m.18 views

PT-2026-7918

AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text input. Attackers can craft a malicious payload that overwrites stack memory and triggers a bind shell on port 9999 when the 'Browse' button ...

8.8CVSS6.1AI score0.00302EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/02/12 12:00 a.m.24 views

PT-2026-7930

AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to...

8.4CVSS6.2AI score0.00152EPSS
SaveExploits0References4
Rows per page
Query Builder