Lucene search
+L

32056 matches found

BDU FSTEC
BDU FSTEC
•added 2024/12/12 12:00 a.m.•17 views

Microsoft/Muzic Player Code Execution

The vulnerability of the Microsoft/Muzic Player Windows Media Player on Windows operating systems is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS8.4AI score0.01669EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•17 views

PT-2024-9325 · Microsoft · Microsoft/Muzic

Name of the Vulnerable Software and Affected Versions: Microsoft/Muzic affected versions not specified Description: The issue is related to a remote code execution flaw in the deserialization mechanism of the Microsoft/Muzic media player in Windows operating systems. This could allow an attacker ...

8.4CVSS7.9AI score0.01669EPSS
SaveExploits0References7
NVD
NVD
•added 2024/12/09 1:15 p.m.•32 views

CVE-2023-47822

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10...

8.8CVSS0.00432EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/12/09 1:15 p.m.•21 views

CVE-2023-47822

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10...

8.8CVSS5.8AI score0.00432EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/09 11:30 a.m.•35 views

CVE-2023-47822 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10...

5.4CVSS0.00432EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/09 11:30 a.m.•17 views

CVE-2023-47822 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10...

5.4CVSS6.9AI score0.00432EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•19 views

PT-2024-13503 · Sonaar · Sonaar Music Mp3 Audio Player

Name of the Vulnerable Software and Affected Versions: Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar versions n/a through 4.10 Description: The issue affects the Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar due to a Missing Authorization vulnerability...

8.8CVSS9.5AI score0.00432EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•22 views

WordPress plugin MP3 Audio Player for Music, Radio & Podcast by Sonaar 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

8.8CVSS8.5AI score0.00432EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•11 views

CVE-2023-47822: Missing Authorization

Missing Authorization vulnerability in Sonaar Music MP3 Audio Player for Music, Radio & Podcast by Sonaar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MP3 Audio Player for Music, Radio & Podcast by Sonaar: from n/a through 4.10...

8.8CVSS5.9AI score0.00432EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/05 3:23 a.m.•40 views

CVE-2024-10881 LUNA RADIO PLAYER <= 6.24.11.07 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lunaradio' shortcode in versions up to, and including, 6.24.11.07 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00261EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/05 3:23 a.m.•72 views

CVE-2024-10881

The CVE: CVE-2024-10881 affects the LUNA RADIO PLAYER WordPress plugin. The vulnerability is a Stored Cross-Site Scripting via the lunaradio shortcode in versions up to and including 6.24.11.07, caused by insufficient input sanitization and output escaping on user-supplied attributes. Impact: aut...

6.4CVSS5.7AI score0.00261EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/12/05 12:00 a.m.•16 views

WordPress plugin LUNA RADIO PLAYER 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.6AI score0.00261EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•10 views

CVE-2024-10881: Improper Neutralization of Input During Web Page Generation

The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lunaradio' shortcode in versions up to, and including, 6.24.11.07 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS6AI score0.00261EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/12/03 11:52 p.m.•13 views

WordPress FV Flowplayer Video Player plugin <= 7.5.47.7212 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library

Authenticated Contributor+ Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library vulnerability discovered by Webbernaut in WordPress Plugin FV Flowplayer Video Player versions = 7.5.47.7212...

6.4CVSS6.1AI score0.00433EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/12/02 2:15 p.m.•55 views

CVE-2024-53713

Cross-Site Request Forgery CSRF vulnerability in rickota Silverlight Video Player smooth-streaming-player allows Stored XSS.This issue affects Silverlight Video Player: from n/a through = 1.0...

7.1CVSS0.00184EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/02 1:48 p.m.•19 views

CVE-2024-53713 WordPress Silverlight Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Alain Diart for les-sushi-codeurs.fr & Eric Ambrosi for regart.net Silverlight Video Player allows Stored XSS.This issue affects Silverlight Video Player: from n/a through 1.0...

7.1CVSS6.8AI score0.00184EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/02 1:48 p.m.•76 views

CVE-2024-53713

CVE-2024-53713 is a CSRF-to-stored XSS issue in the WordPress Silverlight Video Player plugin (versions

7.1CVSS7.2AI score0.00184EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/02 1:48 p.m.•66 views

CVE-2024-53713 WordPress Silverlight Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in rickota Silverlight Video Player smooth-streaming-player allows Stored XSS.This issue affects Silverlight Video Player: from n/a through = 1.0...

7.1CVSS0.00184EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/02 12:00 a.m.•22 views

WordPress plugin Silverlight Video Player 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8.2AI score0.00184EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/02 12:00 a.m.•9 views

PT-2024-35820

Name of the Vulnerable Software and Affected Versions Silverlight Video Player versions n/a through 1.0 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Silverlight Video Player. This means an attacker can execute malicious scripts on the...

7.1CVSS0.00184EPSS
SaveExploits0References4
Rows per page
Query Builder