Lucene search
+L

194 matches found

NVD
NVD
•added 2014/08/06 7:55 p.m.•27 views

CVE-2014-5180

SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...

6.5CVSS8AI score0.02306EPSS
SaveExploits2References2
Prion
Prion
•added 2014/08/06 7:55 p.m.•22 views

Sql injection

SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...

6.5CVSS8.6AI score0.02306EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
•added 2014/08/06 7:00 p.m.•33 views

CVE-2014-5180

SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...

8AI score0.02306EPSS
SaveExploits2References2
CVE
CVE
•added 2014/08/06 7:00 p.m.•54 views

CVE-2014-5180

The CVE-2014-5180 vulnerability affects the WordPress HDW Player Plugin (Video Player & Video Gallery) version 2.4.2. The flaw is a SQL injection in the videos page caused by an id parameter in the wp-admin/admin.php edit action, allowing remote authenticated administrators to execute arbitrary S...

6.5CVSS8.3AI score0.02306EPSS
SaveExploits2References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/08/06 12:00 a.m.•4 views

CVE-2014-5180: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...

6.5CVSS6.4AI score0.02306EPSS
SaveExploits2References2
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•18 views

Adobe Flash Player 9/10 - SWF Version Null Pointer Dereference Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31537/info Adobe Flash Player Plugin is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue will allow attackers to crash the browser that uses the plugin, denying service to legitimate...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/06/25 12:00 a.m.•6 views

CVE-2014-4030: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php...

6.8CVSS5.9AI score0.02857EPSS
SaveExploits2References2
NVD
NVD
•added 2013/02/07 5:56 a.m.•44 views

CVE-2013-1464

Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...

4.3CVSS5.6AI score0.06414EPSS
SaveExploits2References6
UbuntuCve
UbuntuCve
•added 2013/02/07 5:56 a.m.•23 views

CVE-2013-1464

Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...

4.3CVSS6AI score0.06414EPSS
SaveExploits2References2
Prion
Prion
•added 2013/02/07 5:56 a.m.•17 views

Cross site scripting

Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...

4.3CVSS6.1AI score0.06414EPSS
SaveExploits2References6Affected Software1
OSV
OSV
•added 2013/02/07 5:56 a.m.•9 views

UBUNTU-CVE-2013-1464

Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...

4.3CVSS5.9AI score0.06414EPSS
SaveExploits2References3
CVE
CVE
•added 2013/02/07 2:00 a.m.•202 views

CVE-2013-1464

Vulnerability summary (CVE-2013-1464): Cross-site scripting in the WordPress Audio Player plugin’s assets/player.swf, prior to version 2.0.4.6. The flaw allows remote attackers to inject arbitrary web script or HTML via the playerID parameter. Impact is XSS on pages rendering the audio player; ex...

4.3CVSS7.5AI score0.06414EPSS
SaveExploits2References6Affected Software1
OPENSUSE Linux
OPENSUSE Linux
•added 2012/05/29 3:08 p.m.•74 views

update for chromium, v8 (important)

Chromium update to 21.0.1145 Fixed several issues around audio not playing with videos Crash Fixes Improvements to trackpad on Cr-48 Security Fixes bnc762481 - CVE-2011-3083: Browser crash with video + FTP - CVE-2011-3084: Load links from internal pages in their own process. - CVE-2011-3085: UI...

10CVSS1.7AI score0.03307EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2012/05/16 12:00 a.m.•42 views

Google Chrome < 19.0.1084.46 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 19.0.1084.46 and is, therefore, affected by the following vulnerabilities : - Video content with FTP can cause crashes. CVE-2011-3083 - Internal links are not loaded in their own process. CVE-2011-3084 - Lengthy auto-filled...

10CVSS7.3AI score0.03307EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
•added 2011/09/21 12:00 a.m.•21 views

Google Chrome < 14.0.835.163 Multiple Vulnerabilities

Binary data 800955.prm...

7.5CVSS7.3AI score0.03692EPSS
SaveExploits6References33
NVD
NVD
•added 2011/09/19 12:02 p.m.•33 views

CVE-2011-2836

Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier for remote attackers to have an unspecified impact via crafted Flash content...

7.5CVSS6.3AI score0.0119EPSS
SaveExploits0References5
exploitpack
exploitpack
•added 2010/08/25 12:00 a.m.•23 views

Flash Movie Player 1.5 - File Magic Denial of Service

Flash Movie Player 1.5 - File Magic Denial of Service Flash Movie Player v1.5 File Magic Crash http://www.eolsoft.com/ http://www.eolsoft.com/freeware/flashmovieplayer/ Author: Matthew Bergin Website: http://berginpentesting.com Date: August 25, 2010 Description: Flash Movie Player is a free...

0.1AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2010/02/03 12:00 a.m.•12 views

Solaris Update for JDS 3 125332-08

Check for the Version of JDS 3 OpenVAS Vulnerability Test Solaris Update for JDS 3 125332-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

0.1AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/02/03 12:00 a.m.•11 views

Solaris Update for Macromedia Flash Player Plugin 125333-08

Check for the Version of Macromedia Flash Player Plugin OpenVAS Vulnerability Test Solaris Update for Macromedia Flash Player Plugin 125333-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

7.1AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2010/02/03 12:00 a.m.•29 views

Solaris Update for Macromedia Flash Player Plugin 125333-08

Check for the Version of Macromedia Flash Player Plugin OpenVAS Vulnerability Test Solaris Update for Macromedia Flash Player Plugin 125333-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

SaveExploits0References2
Rows per page
Query Builder