CVE-2024-29077

Improper access control in some JAM STAPL Player software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29077

The CVE-2024-29077 issue affects JAM STAPL Player software before version 2.6.1. It is an improper access-control vulnerability that may allow an authenticated user to elevate privileges via local access. According to Intel, the CVSS base scores are CVSSv3.1: 6.7 (LOCAL, HIGH impact on confidenti...

CVE-2024-10816

The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.24.01.24 via the js/fallback.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2024-10816 LUNA RADIO PLAYER <= 6.24.01.24 - Unauthenticated Arbitrary File Read

The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.24.01.24 via the js/fallback.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2024-10816

CVE-2024-10816 affects the LUNA RADIO PLAYER WordPress plugin. In versions up to 6.24.01.24, an unauthenticated attacker can read arbitrary server files via js/fallback.php (Directory Traversal). The vulnerability is documented across multiple sources; patch information shows a fix is available i...

PT-2024-22703 · Unknown · Jam Stapl Player

Name of the Vulnerable Software and Affected Versions: JAM STAPL Player versions prior to 2.6.1 Description: The issue is related to improper access control in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

PT-2024-16572 · WordPress · Luna Radio Player

Name of the Vulnerable Software and Affected Versions: LUNA RADIO PLAYER plugin for WordPress versions up to, and including, 6.24.01.24 Description: The issue allows unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information, via the...

Intel JAM STAPL Player 访问控制错误漏洞

Intel JAM STAPL Player is a multimedia application from Intel Corporation USA. An access control error vulnerability exists in Intel JAM STAPL Player versions prior to 2.6.1 that stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

WordPress plugin LUNA RADIO PLAYER 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2024-29077: Improper Access Control

Improper access control in some JAM STAPL Player software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-10816: Improper Limitation of a Pathname to a Restricted Directory

The LUNA RADIO PLAYER plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.24.01.24 via the js/fallback.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

WordPress Luna Web Radio Player Plugin <= 6.24.01.24 is vulnerable to Directory Traversal

Software Luna Web Radio Player Type Plugin Vulnerable versions = 6.24.01.24 Fixed in 6.24.11.07 OWASP Top 10 A3: Injection Classification Directory Traversal CVE CVE-2024-10816 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 24e0a47712fe Credits Tonn Required privilege...

JAM STAPL Player Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01151.html...

CVE-2024-51573

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ersatzpole ML Responsive Audio player with playlist Shortcode mlr-audio allows Stored XSS.This issue affects ML Responsive Audio player with playlist Shortcode: from n/a through = 0.2...

CVE-2024-51573

CVE-2024-51573 describes a stored XSS in the WordPress plugin ML Responsive Audio player with playlist Shortcode . Affected versions are 0.2 and earlier ; the issue arises from improper neutralization of inputs during web page generation. The provided documents do not include a confirmed fix/patc...

WordPress plugin ML Responsive Audio player with playlist Shortcode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin ML Responsive Audio player wi...

CVE-2024-51573: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ersatzpole ML Responsive Audio player with playlist Shortcode mlr-audio allows Stored XSS.This issue affects ML Responsive Audio player with playlist Shortcode: from n/a through = 0.2...

PT-2024-34716 · Unknown · Ml Responsive Audio Player With Playlist Shortcode

Name of the Vulnerable Software and Affected Versions: ML Responsive Audio player with playlist Shortcode versions 0.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...

WordPress AA Audio Player plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin AA Audio Player versions = 1.0...

WordPress Hola Free Video Player plugin <= 1.3.9 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Hola Free Video Player versions = 1.3.9...