Lucene search
+L

10688 matches found

Cvelist
Cvelist
added 2025/12/09 8:55 p.m.32 views

CVE-2023-53773 MiniDVBLinux 5.4 Unauthenticated Live Stream Disclosure via tv_action.sh

MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tvaction.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR Protocol. Attackers can request /tpl/tvaction.sh to create and retrieve a live TV screenshot stored in /var/www/images/tv.jpg...

8.7CVSS0.00537EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/09 8:55 p.m.4 views

CVE-2023-53773 MiniDVBLinux 5.4 Unauthenticated Live Stream Disclosure via tv_action.sh

MiniDVBLinux 5.4 contains an unauthenticated vulnerability in the tvaction.sh script that allows remote attackers to generate live stream snapshots through the Simple VDR Protocol. Attackers can request /tpl/tvaction.sh to create and retrieve a live TV screenshot stored in /var/www/images/tv.jpg...

8.7CVSS6.5AI score0.00537EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/09 8:43 p.m.30 views

CVE-2021-47727 Selea Targa IP Camera Unauthenticated Stream Disclosure

Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage...

8.7CVSS0.00478EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/09 8:43 p.m.3 views

CVE-2021-47727 Selea Targa IP Camera Unauthenticated Stream Disclosure

Selea Targa IP OCR-ANPR Camera contains an unauthenticated vulnerability that allows remote attackers to access live video streams without authentication. Attackers can directly connect to RTP/RTSP or M-JPEG streams by requesting specific endpoints like p1.mjpg or p1.264 to view camera footage...

8.7CVSS6.7AI score0.00478EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.15 views

PT-2025-50246

Name of the Vulnerable Software and Affected Versions Selea Targa IP OCR-ANPR Camera affected versions not specified Description The Selea Targa IP OCR-ANPR Camera has an issue allowing remote access to live video streams without requiring authentication. Attackers can access these streams by...

8.7CVSS6.6AI score0.00478EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.11 views

Selea Targa IP OCR-ANPR Camera 访问控制错误漏洞

The Selea Targa IP OCR-ANPR Camera is an IP camera from Selea. An access control error vulnerability exists in the Selea Targa IP OCR-ANPR Camera, which stems from an unauthenticated access issue that could lead to the disclosure of live video streams...

8.7CVSS6.6AI score0.00478EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.9 views

MiniDVBLinux 访问控制错误漏洞

MiniDVBLinux is a multimedia center software from the German company MiniDVBLinux. An access control error vulnerability exists in MiniDVBLinux version 5.4 that originates from unauthorized access and could result in the generation of live screenshots...

8.7CVSS6.6AI score0.00537EPSS
SaveExploits1References5
Patchstack
Patchstack
added 2025/12/08 7:11 a.m.17 views

WordPress Live Sales Notification for Woocommerce – Woomotiv plugin <= 3.6.3 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Live Sales Notification for Woocommerce - Woomotiv versions = 3.6.3...

6.1CVSS6.1AI score0.00201EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2025/12/06 1:44 p.m.189 views

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js RSC Vulnerability Scanner CVE-2025-66478 A lightwei...

10CVSS8.5AI score0.99616EPSS
SaveExploits398
RedhatCVE
RedhatCVE
added 2025/12/06 6:58 a.m.24 views

CVE-2025-12354

The Live CSS Preview plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxfrontendsave' AJAX endpoint in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Subscriber-level access an...

4.3CVSS5.9AI score0.00222EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/06 6:30 a.m.10 views

EUVD-2025-201536

The Live Sales Notification for Woocommerce – Woomotiv plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'woomotivlimit' parameter in all versions up to, and including, 3.6.3 due to insufficient input sanitization and output escaping. This makes it possible for...

6.1CVSS5.2AI score0.00201EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/06 12:00 a.m.12 views

WordPress plugin Live Sales Notification for Woocommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.7AI score0.00201EPSS
SaveExploits0References3
Akamai Blog
Akamai Blog
added 2025/12/05 11:00 p.m.26 views

MSL5 General Availability and MSL4 Product Retirement

Akamai Media Services Live 4 will be discontinued on December 31, 2026. The upgraded Akamai Media Services Live 5 is currently in general availability...

7AI score
SaveExploits0
NVD
NVD
added 2025/12/05 7:16 a.m.17 views

CVE-2025-12354

The Live CSS Preview plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxfrontendsave' AJAX endpoint in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Subscriber-level access an...

4.3CVSS0.00222EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/05 6:07 a.m.22 views

CVE-2025-12354

CVE-2025-12354 affects WordPress plugin Live CSS Preview. A missing capability check on the AJAX action wp_ajax_frontend_save permits authenticated users with Subscriber+ privileges to modify the plugin CSS settings, across versions up to 2.0.0. Impact is unauthorized modification of data via the...

4.3CVSS5.9AI score0.00222EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/05 6:07 a.m.39 views

CVE-2025-12354 Live CSS Preview <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Live CSS Preview plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxfrontendsave' AJAX endpoint in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Subscriber-level access an...

4.3CVSS0.00222EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/05 6:07 a.m.6 views

CVE-2025-12354 Live CSS Preview <= 2.1.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update

The Live CSS Preview plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxfrontendsave' AJAX endpoint in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, with Subscriber-level access an...

4.3CVSS5.8AI score0.00222EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/12/05 6:07 a.m.7 views

EUVD-2025-201359

The Live CSS Preview plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wpajaxfrontendsave' AJAX endpoint in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with Subscriber-level access an...

4.3CVSS4.7AI score0.00222EPSS
SaveExploits0References3
Fedora
Fedora
added 2025/12/05 2:42 a.m.13 views

[SECURITY] Fedora 42 Update: texlive-base-20230311-94.fc42

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font...

8.2CVSS7AI score0.00391EPSS
SaveExploits2
Fedora
Fedora
added 2025/12/05 2:11 a.m.12 views

[SECURITY] Fedora 43 Update: texlive-base-20230311-94.fc43

The TeX Live software distribution offers a complete TeX system for a variety of Unix, Macintosh, Windows and other platforms. It encompasses programs for editing, typesetting, previewing and printing of TeX documents in many different languages, and a large collection of TeX macros and font...

8.2CVSS7AI score0.00391EPSS
SaveExploits2
Rows per page
Query Builder