2499 matches found
The vulnerability of the gfmedia_map_esd function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the gfmediamapesd function in the MP4Box utility of the GPAC multimedia platform is related to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2021-32686
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...
The vulnerability of the gf_odf_ac4_cfg_dsi_v1 function in the MP4Box utility of the GPAC multimedia platform allows a hacker to induce a service failure.
The vulnerability of the gfodfac4cfgdsiv1 function in the MP4Box utility of the GPAC multimedia platform involves reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the gf_filter_pid_resolve_file_template_ex function in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure.
The vulnerability of the gffilterpidresolvefiletemplateex function in the MP4Box utility of the GPAC multimedia platform is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2021-46041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Segmentation Fault Vulnerability exists in GPAC 1.0.1 via the co64boxnew function, which causes a Denial of Service. CVE-2021-46041 Note that Nessus relies on...
CVE-2025-30626
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbgvpyoutubevimeoaddonvisualcomposer allows Reflected XSS.This issue affects Multimedia Playlist Slider Addon for WPBakery Pa...
CVE-2025-30626
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbgvpyoutubevimeoaddonvisualcomposer allows Reflected XSS.This issue affects Multimedia Playlist Slider Addon for WPBakery Pa...
CVE-2025-30626 WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbgvpyoutubevimeoaddonvisualcomposer allows Reflected XSS.This issue affects Multimedia Playlist Slider Addon for WPBakery Pa...
CVE-2025-30626
CVE-2025-30626 is a Reflected Cross-Site Scripting vulnerability in the WordPress plugin Multimedia Playlist Slider Addon for WPBakery Page Builder (LambertGroup), affecting versions up to 2.1. The issue stems from improper input neutralization during web page generation, enabling an attacker to ...
CVE-2025-30626 WordPress Multimedia Playlist Slider Addon for WPBakery Page Builder <= 2.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbgvpyoutubevimeoaddonvisualcomposer allows Reflected XSS.This issue affects Multimedia Playlist Slider Addon for WPBakery Pa...
PT-2025-33159 · WordPress · Multimedia Playlist Slider Addon For Wpbakery Page Builder
Name of the Vulnerable Software and Affected Versions: Multimedia Playlist Slider Addon for WPBakery Page Builder versions through 2.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Reflected Cross-site Scripting XSS flaw...
WordPress plugin Multimedia Playlist Slider Addon for WPBakery Page Builder 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2025-30626: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Multimedia Playlist Slider Addon for WPBakery Page Builder lbgvpyoutubevimeoaddonvisualcomposer allows Reflected XSS.This issue affects Multimedia Playlist Slider Addon for WPBakery Pa...
Cross-site Scripting (XSS)
copyparty is vulnerable to DOM-based Cross-site Scripting XSS. The vulnerability is due to improper sanitization of multimedia tags in music files, including m3u files, which allows an attacker to execute arbitrary JavaScript code in a victim's browser...
Alpine iLX-507 Command Injection Vulnerability (CNVD-2025-20812)
The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from a command injection vulnerability that can be exploited by an attacker to execute code in the context of the device...
Alpine iLX-507 Stack Buffer Overflow Vulnerability (CNVD-2025-20810)
The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in a root context...
Alpine iLX-507 UPDM_wstpCBCUpdStart Function OS Command Injection Vulnerability
The Alpine iLX-507 is a multimedia receiver from Alpine USA. The Alpine iLX-507 UPDMwstpCBCUpdStart function suffers from an operating system command injection vulnerability that stems from the failure of the UPDMwstpCBCUpdStart function to correctly filter constructed command special characters,...
CVE-2025-27062 Improper Access Control in Automotive Multimedia
Memory corruption while handling client exceptions, allowing unauthorized channel access...
CVE-2025-27062
CVE-2025-27062 involves memory corruption when handling client exceptions that can grant unauthorized channel access. Documents reference affected platforms as Qualcomm chipsets / automotive multimedia, with a root cause described as memory corruption in client-side exception handling. CVSS 3.1 d...