WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

Software Video Player Type Plugin Vulnerable versions = 1.5.22 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48320 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 90d3d469b500 Credits SeungYongLee Required privilege...

Podlove Web Player <= 5.7.3 - Missing Authorization

Description The Podlove Web Player plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on an unknown function in versions up to, and including, 5.7.3. This makes it possible for unauthenticated attackers to perform an unauthorized action...

CVE-2023-46814

A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM...

CVE-2023-46814

A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM...

CVE-2023-46814

A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM...

CVE-2023-46814

A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM...

The vulnerability of the GetPacket() function in the VideoLAN VLC media player software allows a hacker to trigger a service failure.

The vulnerability of the GetPacket function in the VLC Media Player media player is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2023-46814

The vulnerability CVE-2023-46814 affects VideoLAN VLC media player on Windows prior to 3.0.19. The issue is a binary hijack where the uninstaller runs actions with elevated privileges from a standard-user-writable location, allowing arbitrary code execution as SYSTEM. Impact is elevated privilege...

The vulnerability of the GetPacket() function in the VLC Media Player allows a hacker to corrupt memory.

The vulnerability of the GetPacket function in the VLC Media Player is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to corrupt memory...

[SECURITY] Fedora 39 Update: gstreamer1-plugin-libav-1.22.7-1.fc39

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

SUSE CVE-2023-47360

Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...

WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar Plugin <= 4.10 is vulnerable to Broken Access Control

Software MP3 Audio Player for Music, Radio & Podcast by Sonaar Type Plugin Vulnerable versions = 4.10 Fixed in 4.10.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-47822 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8b88ee16e64b...

PT-2023-8830 · WordPress · Podlove Web Player

Name of the Vulnerable Software and Affected Versions: Podlove Web Player versions through 5.7.3 Description: The issue is related to insufficient authorization procedures in the Podlove Web Player plugin for WordPress, allowing a remote attacker to impact the integrity and confidentiality of...

CVE-2023-47359

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...

DEBIAN-CVE-2023-47359

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...

UBUNTU-CVE-2023-47359

Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket and results in a memory corruption...

UBUNTU-CVE-2023-47360

Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...

VideoLAN VLC media player security vulnerability

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. It supports the playback of a wide range of media files, CD-ROMs, etc., audio and video formats WMV, MP3, etc., and more. A security vulnerability exists in...

CVE-2023-47360

Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length...

KLA66427 ACE vulnerability in VLC media player

An execute arbitrary code vulnerability was found in VLC media player. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories SB-VLC3019 Related products VLC-media-player CVE list CVE-2023-46814 critical Solution Update to the latest version Download VLC med...