Lucene search
+L

32046 matches found

CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•19 views

Xion Audio Player 安全漏洞

Xion Audio Player is an audio player from Xion Audio Player, Inc. A security vulnerability exists in Xion Audio Player versions prior to 1.0.126, which stems from a Unicode-based stack buffer overflow when processing specially crafted .m3u playlist files, which could lead to the execution of...

8.4CVSS7.2AI score0.00393EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•14 views

MJM Core Player 安全漏洞

MJM Core Player is an audio player from MJM Australia. A security vulnerability exists in MJM Core Player version 2011 that originates from a stack-based buffer overflow when parsing .s3m files, which could lead to the execution of arbitrary code...

8.4CVSS7.3AI score0.00403EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•6 views

CVE-2025-54044: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

7.1CVSS5.8AI score0.00244EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•4 views

CVE-2011-10024: Stack-based Buffer Overflow

MJM Core Player likely now referred to as MJM Player 2011 is vulnerable to a stack-based buffer overflow when parsing specially crafted .s3m music files. The vulnerability arises from improper bounds checking in the file parser, allowing an attacker to overwrite memory on the stack and execute...

8.4CVSS6.8AI score0.00403EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•6 views

CVE-2025-48159: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Youtube Vimeo Video Player and Slider WP Plugin video-player-youtube-vimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player and Slider WP Plugin: from n/a through = 3...

7.1CVSS5.8AI score0.00228EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•11 views

PT-2025-33918 · WordPress · Youtube Vimeo Video Player/Slider Wp Plugin

Name of the Vulnerable Software and Affected Versions: Youtube Vimeo Video Player and Slider WP Plugin versions through 3.8 Description: The vulnerability involves improper neutralization of input during web page generation, leading to a reflected cross-site scripting XSS issue. Recommendations:...

7.1CVSS5.5AI score0.00228EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•5 views

CVE-2025-53212: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Revolution Video Player With Bottom Playlist revolution-video-player allows Reflected XSS.This issue affects Revolution Video Player With Bottom Playlist: from n/a through = 2.9.2...

7.1CVSS5.8AI score0.00243EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•8 views

CVE-2011-10023: Stack-based Buffer Overflow

MJM QuickPlayer also known as MJM Player version 2010 contains a stack-based buffer overflow vulnerability triggered by opening a malicious .s3m music file. The flaw occurs due to improper bounds checking in the file parser, allowing an attacker to overwrite memory and execute arbitrary code...

8.4CVSS6.7AI score0.00395EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•12 views

WordPress plugin Elite Video Player 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

7.1CVSS6.1AI score0.00244EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•9 views

PT-2025-34011 · Unknown · Elite Video Player

Name of the Vulnerable Software and Affected Versions: Elite Video Player versions through 10.0.5 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Reflected Cross-site Scripting XSS. Recommendations: Update Elite Video Playe...

7.1CVSS6.1AI score0.00244EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/08/17 3:24 p.m.•26 views

CVE-2025-49432

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Video Player: from n/a through = 10.1...

5.3CVSS5.9AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/15 4:15 p.m.•15 views

CVE-2025-49432

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Video Player: from n/a through = 10.1...

5.3CVSS0.00295EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/15 3:13 p.m.•43 views

CVE-2025-49432

CVE-2025-49432 affects FWDesign Ultimate Video Player (WordPress plugin) up to version 10.1. Description documents a Missing Authorization vulnerability caused by incorrectly configured access control security levels, enabling unauthorized access actions. Public sources (PT-Security) indicate the...

5.3CVSS5.9AI score0.00295EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/15 3:13 p.m.•34 views

CVE-2025-49432 WordPress Ultimate Video Player Plugin <= 10.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Video Player: from n/a through = 10.1...

5.3CVSS0.00295EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/15 3:13 p.m.•10 views

CVE-2025-49432 WordPress Ultimate Video Player Plugin <= 10.1 - Broken Access Control Vulnerability

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Video Player: from n/a through = 10.1...

5.3CVSS5.9AI score0.00295EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/08/15 12:56 p.m.•26 views

WordPress Ultimate Video Player Plugin <= 10.1 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Ultimate Video Player versions = 10.1...

5.3CVSS6.6AI score0.00295EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/15 12:00 a.m.•19 views

PT-2025-33490 · Fwdesign · Fwdesign Ultimate Video Player

Name of the Vulnerable Software and Affected Versions: FWDesign Ultimate Video Player versions n/a through 10.1 Description: Missing authorization allows exploiting incorrectly configured access control security levels in FWDesign Ultimate Video Player. Recommendations: At the moment, there is no...

5.3CVSS6.2AI score0.00295EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/08/15 12:00 a.m.•15 views

WordPress plugin Ultimate Video Player 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.8AI score0.00295EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/15 12:00 a.m.•6 views

CVE-2025-49432: Missing Authorization

Missing Authorization vulnerability in FWDesign Ultimate Video Player fwduvp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Video Player: from n/a through = 10.1...

5.3CVSS5.9AI score0.00295EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•4 views

Malicious code in discovery-player (npm)

The package discovery-player was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder