Lucene search
+L

32072 matches found

Cvelist
Cvelist
•added 2024/03/27 5:59 a.m.•35 views

CVE-2024-22299 WordPress FV Player plugin <= 7.5.41.7212 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Foliovision: Making the web work for you FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.41.7212...

7.1CVSS7.2AI score0.00394EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
•added 2024/03/27 12:00 a.m.•19 views

Radio Player < 2.0.74 - Missing Authorization via get_players

Description The Radio Player plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getplayers' function in versions up to, and including, 2.0.73. This makes it possible for unauthenticated attackers to retrieve a list of radio players...

6.5CVSS6.8AI score0.00482EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•8 views

CVE-2024-29917: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Compact WP Audio Player allows Stored XSS.This issue affects Compact WP Audio Player: from n/a through 1.9.9...

6.5CVSS5.8AI score0.0032EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•17 views

WordPress Plugin FV Flowplayer Video Player Cross-site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.1CVSS7AI score0.00394EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•24 views

WordPress Plugin Podlove Web Player Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS7AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•21 views

PT-2024-23057 · Softlab · Softlab Radio Player

Name of the Vulnerable Software and Affected Versions: SoftLab Radio Player versions 2.0.73 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject...

6.5CVSS6AI score0.00336EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•19 views

PT-2024-23031 · Unknown · Podlove Web Player

Name of the Vulnerable Software and Affected Versions: Podlove Web Player versions through 5.7.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. Recommendations: For versions through 5.7.1,...

6.5CVSS9.2AI score0.00331EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•7 views

CVE-2024-22299: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Foliovision: Making the web work for you FV Flowplayer Video Player allows Reflected XSS.This issue affects FV Flowplayer Video Player: from n/a through 7.5.41.7212...

7.1CVSS5.8AI score0.00394EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•5 views

CVE-2024-29811: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in SoftLab Radio Player allows Stored XSS.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS5.8AI score0.00336EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•19 views

WordPress Plugin Compact WP Audio Player Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS7AI score0.0032EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/27 12:00 a.m.•5 views

CVE-2024-29788: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Podlove Podlove Web Player allows Stored XSS.This issue affects Podlove Web Player: from n/a through 5.7.1...

6.5CVSS5.8AI score0.00331EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/27 12:00 a.m.•21 views

PT-2024-23139 · WordPress · Compact Wp Audio Player

Name of the Vulnerable Software and Affected Versions: Compact WP Audio Player versions 1.9.9 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

6.5CVSS9.1AI score0.0032EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/03/27 12:00 a.m.•20 views

WordPress Plugin Radio Player Cross-Site Script Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS5.6AI score0.00336EPSS
SaveExploits0References2
NVD
NVD
•added 2024/03/26 1:15 p.m.•20 views

CVE-2024-2906

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS6.5AI score0.00482EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/26 12:25 p.m.•28 views

CVE-2024-2906 WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS6.7AI score0.00482EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/26 12:25 p.m.•34 views

CVE-2024-2906 WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73...

6.5CVSS6.7AI score0.00482EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/26 12:25 p.m.•91 views

CVE-2024-2906

CVE-2024-2906 describes a Missing Authorization vulnerability in SoftLab Radio Player (WordPress Radio Player plugin). Publicly available refs corroborate the issue affecting Radio Player versions up to 2.0.73. The Red Hat security entry mirrors the description and notes the affected product as R...

6.5CVSS8.6AI score0.00482EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2024/03/26 11:29 a.m.•37 views

Crafting Shields: Defending Minecraft Servers Against DDoS Attacks

Minecraft, with over 500 million registered users and 166 million monthly players, faces significant risks from distributed denial-of-service DDoS attacks, threatening server functionality, player experience, and the game's reputation. Despite the prevalence of DDoS attacks on the game, the...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/03/26 12:00 a.m.•16 views

PT-2024-19320 · Unknown · Fv Flowplayer Video Player

Name of the Vulnerable Software and Affected Versions: FV Flowplayer Video Player versions n/a through 7.5.41.7212 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows Reflected XSS. Recommendations: For...

7.1CVSS9.4AI score0.00394EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/03/26 12:00 a.m.•17 views

WordPress Plugin Radio Player security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

6.5CVSS8AI score0.00482EPSS
SaveExploits0References2
Rows per page
Query Builder