1062 matches found
CVE-2025-46587
CVE-2025-46587 pertains to Huawei HarmonyOS: a permission-control issue in the Media Library module that could affect service confidentiality. The root cause is improper privilege control within the Media Library; exploitation is described as local with low complexity, and no explicit patch versi...
CVE-2025-46587
Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an information disclosure vulnerability that stems from insufficient protection of information in the media library module, which affects service confidentiality. No details of the vulnerability...
PT-2025-19868 · Huawei · Harmonyos
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns insufficient information protection in the media library module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At the...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from the Chinese company Huawei. Huawei HarmonyOS suffers from an Improper Privilege Control vulnerability that stems from improper privilege control of the Media Library module, which affects service confidentiality. No details of the vulnerability are...
PT-2025-19974 · Huawei · Harmonyos
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A permission control issue exists in the media library module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the moment, there is no informati...
CVE-2025-46519
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
CVE-2025-46519
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
CVE-2025-46519 WordPress Media Library Downloader plugin <= 1.3.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
CVE-2025-46519
CVE-2025-46519 concerns WordPress Media Library Downloader <= 1.3.1 with Missing Authorization due to misconfigured access controls. Public sources (NVD patch entry, PatchStack, and Red Hat/CVE listings) corroborate a vulnerability enabling unauthorized access across the plugin, affecting vers...
CVE-2025-46519 WordPress Media Library Downloader plugin <= 1.3.1 - Broken Access Control Vulnerability
Missing Authorization vulnerability in M.Code Media Library Downloader media-library-downloader allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Media Library Downloader: from n/a through = 1.3.1...
PT-2025-17823 · Unknown · Media Library Downloader
Name of the Vulnerable Software and Affected Versions: Media Library Downloader versions 1.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Media Library...
WordPress plugin Media Library Downloader 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Kentico Xperience cross-site scripting vulnerability (CNVD-2026-05132)
Kentico Xperience is a digital experience platform from Kentico. Kentico Xperience suffers from a cross-site scripting vulnerability that can be exploited by an attacker to allow an authenticated user to distribute malicious content via specific interactions with the media library file upload...
CVE-2025-32369
Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content for stored XSS via certain interactions with the media library file upload feature...
Cross-site Scripting (XSS)
Overview Kentico.Xperience.Libraries is a package for libraries and applications that use Kentico Xperience API. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the media library file upload feature. An attacker can distribute malicious content by uploading...
CVE-2025-32369
Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content for stored XSS via certain interactions with the media library file upload feature...
CVE-2025-32369
Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content for stored XSS via certain interactions with the media library file upload feature...
CVE-2025-32369
Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content for stored XSS via certain interactions with the media library file upload feature...
CVE-2025-32369
Kentico Xperience prior to 13.0.181 is affected by a stored XSS vulnerability in the media library file upload feature. An authenticated user can distribute malicious content via interactions with the media library upload, potentially impacting end users. The issue is mitigated by upgrading Kenti...