WordPress Soundy Background Music Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Soundy Background Music plugin is used in one of the background music playback plugin. A cross-site scripting...

CVE-2018-6002

The Soundy Background Music plugin 3.9 and below for WordPress has Cross-Site Scripting via soundy-background-music\templates\front-end.php warsoundypreview parameter...

CVE-2018-6002

CVE-2018-6002 : The Soundy Background Music plugin for WordPress (version 3.9 and earlier) is affected by a Cross-Site Scripting vulnerability in templates/front-end.php via the war_soundy_preview parameter. The root cause is unsanitized input that can be reflected to the user, enabling an attack...

CVE-2018-6002

The Soundy Background Music plugin 3.9 and below for WordPress has Cross-Site Scripting via soundy-background-music\templates\front-end.php warsoundypreview parameter...

adams-music.com XSS vulnerability

Open Bug Bounty ID: OBB-533569 Description| Value ---|--- Affected Website:| adams-music.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Soundy Background Music <= 3.9 - Cross-Site Scripting (XSS)

The last time it was checked the plugin was still affected and had been closed...

music-box.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-501097 Description| Value ---|--- Affected Website:| music-box.co.jp Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

warnermusic.co.id XSS vulnerability

Open Bug Bounty ID: OBB-472533 Description| Value ---|--- Affected Website:| warnermusic.co.id Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-10909

Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10909

Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-10909

CVE-2017-10909 is a DLL search path (CWE-427) vulnerability in the Music Center for PC installer. Affected versions are 1.0.01 and earlier. The issue allows arbitrary code execution with the privileges of the user invoking the installer due to insecurely loading DLLs from an unspecified directory...

CVE-2017-10909

Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

The installer of Music Center for PC may insecurely load Dynamic Link Libraries

Overview Music Center for PC provided by Sony Video & Sound Products Inc. is a file management tool. The installer of Music Center for PC contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Note that this vulnerability is different from...

JVN#60695371: The installer of Music Center for PC may insecurely load Dynamic Link Libraries

Music Center for PC provided by Sony Video & Sound Products Inc. is a file management tool. The installer of Music Center for PC contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privileg...

thevenet-music.fr XSS vulnerability

Open Bug Bounty ID: OBB-455008 Description| Value ---|--- Affected Website:| thevenet-music.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Game_Music_Emu Library Denial of Service Vulnerability

GameMusicEmu library aka game-music-emu is a console music simulator and player library. A security vulnerability exists in the 'MemFileReader::readavail' function of the DataReader.cpp file in GameMusicEmu library version 0.6.1. A remote attacker can exploit this vulnerability to cause a denial ...

CVE-2017-17446

The MemFileReader::readavail function in DataReader.cpp in the GameMusicEmu library aka game-music-emu 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service application crash via a crafted file...

DEBIAN-CVE-2017-17446

The MemFileReader::readavail function in DataReader.cpp in the GameMusicEmu library aka game-music-emu 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service application crash via a crafted file...

UBUNTU-CVE-2017-17446

The MemFileReader::readavail function in DataReader.cpp in the GameMusicEmu library aka game-music-emu 0.6.1 does not ensure a non-negative size, which allows remote attackers to cause a denial of service application crash via a crafted file...