194 matches found
CVE-2014-5180
SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...
Sql injection
SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...
CVE-2014-5180
SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...
CVE-2014-5180
The CVE-2014-5180 vulnerability affects the WordPress HDW Player Plugin (Video Player & Video Gallery) version 2.4.2. The flaw is a SQL injection in the videos page caused by an id parameter in the wp-admin/admin.php edit action, allowing remote authenticated administrators to execute arbitrary S...
CVE-2014-5180: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...
Adobe Flash Player 9/10 - SWF Version Null Pointer Dereference Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31537/info Adobe Flash Player Plugin is prone to a remote denial-of-service vulnerability. Successfully exploiting this issue will allow attackers to crash the browser that uses the plugin, denying service to legitimate...
CVE-2014-4030: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php...
CVE-2013-1464
Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...
CVE-2013-1464
Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...
UBUNTU-CVE-2013-1464
Cross-site scripting XSS vulnerability in assets/player.swf in the Audio Player plugin before 2.0.4.6 for Wordpress allows remote attackers to inject arbitrary web script or HTML via the playerID parameter...
CVE-2013-1464
Vulnerability summary (CVE-2013-1464): Cross-site scripting in the WordPress Audio Player plugin’s assets/player.swf, prior to version 2.0.4.6. The flaw allows remote attackers to inject arbitrary web script or HTML via the playerID parameter. Impact is XSS on pages rendering the audio player; ex...
update for chromium, v8 (important)
Chromium update to 21.0.1145 Fixed several issues around audio not playing with videos Crash Fixes Improvements to trackpad on Cr-48 Security Fixes bnc762481 - CVE-2011-3083: Browser crash with video + FTP - CVE-2011-3084: Load links from internal pages in their own process. - CVE-2011-3085: UI...
Google Chrome < 19.0.1084.46 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 19.0.1084.46 and is, therefore, affected by the following vulnerabilities : - Video content with FTP can cause crashes. CVE-2011-3083 - Internal links are not loaded in their own process. CVE-2011-3084 - Lengthy auto-filled...
Google Chrome < 14.0.835.163 Multiple Vulnerabilities
Binary data 800955.prm...
CVE-2011-2836
Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier for remote attackers to have an unspecified impact via crafted Flash content...
Flash Movie Player 1.5 - File Magic Denial of Service
Flash Movie Player 1.5 - File Magic Denial of Service Flash Movie Player v1.5 File Magic Crash http://www.eolsoft.com/ http://www.eolsoft.com/freeware/flashmovieplayer/ Author: Matthew Bergin Website: http://berginpentesting.com Date: August 25, 2010 Description: Flash Movie Player is a free...
Solaris Update for JDS 3 125332-08
Check for the Version of JDS 3 OpenVAS Vulnerability Test Solaris Update for JDS 3 125332-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...
Solaris Update for Macromedia Flash Player Plugin 125333-08
Check for the Version of Macromedia Flash Player Plugin OpenVAS Vulnerability Test Solaris Update for Macromedia Flash Player Plugin 125333-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...
Solaris Update for Macromedia Flash Player Plugin 125333-08
Check for the Version of Macromedia Flash Player Plugin OpenVAS Vulnerability Test Solaris Update for Macromedia Flash Player Plugin 125333-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...