Lucene search
+L

28096 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/04/13 12:00 a.m.23 views

Adobe Flash Player Stack-Based Buffer Overflow Vulnerability

Stack-based buffer overflow in Adobe Flash Player allows attackers to execute code remotely...

10CVSS7.2AI score0.20356EPSS
SaveIn wildExploits1
CISA KEV Catalog
CISA KEV Catalog
added 2022/04/13 12:00 a.m.21 views

Adobe Flash Player Heap-Based Buffer Overflow Vulnerability

Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code...

10CVSS7.1AI score0.9994EPSS
SaveIn wildExploits4
CISA KEV Catalog
CISA KEV Catalog
added 2022/04/13 12:00 a.m.30 views

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 AS3 implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service DoS...

10CVSS6.9AI score0.18493EPSS
SaveIn wildExploits0
CNVD
CNVD
added 2022/04/07 12:00 a.m.54 views

WordPress FV Flowplayer Video Player跨站脚本漏洞

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress FV Flowplayer Video Player 7.5.18.727 and previous versions have a cross-site scripting vulnerability tha...

5.4CVSS2.7AI score0.00571EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/04 8:15 p.m.11 views

CVE-2022-25613

Authenticated Persistent Cross-Site Scripting XSS vulnerability in FV Flowplayer Video Player WordPress plugin versions = 7.5.18.727 via &fvwpflowplayerfieldsplash parameter...

5.4CVSS5.8AI score0.00571EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/04 7:46 p.m.83 views

CVE-2022-25613

Summary : CVE-2022-25613 is an authenticated persistent Cross-Site Scripting (XSS) vulnerability in the WordPress FV Flowplayer Video Player plugin (versions

5.4CVSS4.7AI score0.00571EPSS
SaveExploits0References2Affected Software1
The Hacker News
The Hacker News
added 2022/03/28 9:14 a.m.35 views

'Purple Fox' Hackers Spotted Using New Variant of FatalRAT in Recent Malware Attacks

The operators of the Purple Fox malware have retooled their malware arsenal with a new variant of a remote access trojan called FatalRAT, while also simultaneously upgrading their evasion mechanisms to bypass security software. "Users' machines are targeted via trojanized software packages...

1.3AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2022/03/28 12:00 a.m.11 views

VulnCheck KEV: CVE-2012-2034

Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service DoS...

9.3CVSS6.4AI score0.078EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/28 12:00 a.m.24 views

Adobe Flash Player Memory Corruption Vulnerability

Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service DoS...

9.3CVSS7.5AI score0.078EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:00 a.m.21 views

Adobe Flash Player Use-After-Free Vulnerability

Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class...

9.3CVSS2.1AI score0.18786EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:00 a.m.43 views

Adobe Flash Player Remote Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows for remote code execution...

10CVSS3.9AI score0.20211EPSS
SaveIn wildExploits0
CNVD
CNVD
added 2022/03/22 12:00 a.m.46 views

WordPress FV Flowplayer Video Player plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress FV Flowplayer Video Player plugin version 7.5.15.727 and earlier versions are vulnerable to SQL injection. The vulnerability...

7.2CVSS4AI score0.00827EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/18 6:15 p.m.20 views

Sql injection

Authenticated author or higher user role SQL Injection SQLi vulnerability discovered in FV Flowplayer Video Player WordPress plugin versions = 7.5.15.727...

6.5CVSS7.4AI score0.00827EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/18 6:00 p.m.11 views

CVE-2022-25607 WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability

Authenticated author or higher user role SQL Injection SQLi vulnerability discovered in FV Flowplayer Video Player WordPress plugin versions = 7.5.15.727...

6.6CVSS7.1AI score0.00827EPSS
SaveExploits0References2
CVE
CVE
added 2022/03/18 6:00 p.m.98 views

CVE-2022-25607

FV Flowplayer Video Player WordPress plugin (versions ≤ 7.5.15.727) is affected by an authenticated SQL Injection vulnerability due to insufficient input validation. The vulnerability affects the plugin when used with WordPress; impact is partial to high across confidentiality, integrity, and ava...

7.2CVSS7.1AI score0.00827EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.12 views

Apple macOS Big Sur 访问控制错误漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. An Access Control Error vulnerability exists in Apple macOS Big Sur prior to version 11.6.5, which stems from improper access restrictions in QuickTime Player on the system. An attacker can write a malicious plugin to exploit the...

5.5CVSS6.7AI score0.00254EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2022/03/11 6:15 p.m.8 views

CVE-2022-25216

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player recently renamed PlayerFab has read-access, by means of an HTTP GET request to http://:32080/download/...

7.8CVSS7.2AI score0.13835EPSS
SaveExploits1References3
CVE
CVE
added 2022/03/11 5:54 p.m.101 views

CVE-2022-25216

DVDFab 12 Player/PlayerFab is affected by a local file inclusion (absolute path traversal) via HTTP GET to /download/. The issue allows remote attackers to download any file on the Windows filesystem readable by the running user. Root cause: traversal of local paths in the download endpoint. Affe...

7.8CVSS7.5AI score0.13835EPSS
SaveExploits1References1Affected Software2
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:00 a.m.65 views

Adobe Flash Player Use-After-Free Vulnerability

Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code...

9.3CVSS7.1AI score0.25198EPSS
SaveIn wildExploits0
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/03 12:00 a.m.28 views

Adobe Flash Player Arbitrary Code Execution Vulnerability

Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content...

9.3CVSS7.9AI score0.70384EPSS
SaveIn wildExploits11
Rows per page
Query Builder