Lucene search
+L

31951 matches found

CVE
CVE
•added 2026/01/30 10:07 p.m.•22 views

CVE-2020-37050

Consolidated view: Quick Player 1.3 is affected by a buffer overflow in the .m3l file loading path, enabling potential remote code execution when a specially crafted file is loaded. Affected component/file: Quick Player 1.3 (buffer overflow in .m3l handling). Root cause: improper handling of craf...

9.8CVSS7.2AI score0.00804EPSS
SaveExploits0References5
Patchstack
Patchstack
•added 2026/01/30 8:57 a.m.•25 views

WordPress The Ultimate Video Player For WordPress plugin < 2.2.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Presto Player versions 2.2.3...

4.7CVSS5.9AI score0.00495EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/30 12:00 a.m.•2 views

CVE-2020-37050: Buffer Copy without Checking Size of Input

Quick Player 1.3 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious .m3l file with carefully constructed payload. Attackers can trigger the vulnerability by loading a specially crafted file through the application's file loading...

9.8CVSS7.1AI score0.00804EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/30 12:00 a.m.•33 views

Quick Player security vulnerability

Quick Player is a video playback application developed by Quick Player Inc. Version 1.3 of Quick Player contains a security vulnerability, which stems from a buffer overflow when loading specially crafted .m3l files, potentially allowing for the execution of arbitrary code...

9.8CVSS6.3AI score0.00804EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•28 views

PT-2026-5487

Name of the Vulnerable Software and Affected Versions Quick Player version 1.3 Description The software contains a buffer overflow issue that allows for the execution of arbitrary code. This is achieved by creating a malicious .m3l file with a specifically designed payload. Attackers can trigger...

9.8CVSS6.4AI score0.00804EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/01/27 12:00 a.m.•18 views

Lua Player Plus Vita security vulnerability

Lua Player Plus Vita is a script interpreter developed by Alessio Tosto as an individual project. Prior versions of Lua Player Plus Vita R6 had security vulnerabilities, which stemmed from out-of-bounds read operations...

7.8CVSS5.8AI score0.00138EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/24 3:18 p.m.•31 views

CVE-2026-24548

Server-Side Request Forgery SSRF vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through = 2.0.91...

5.4CVSS5.9AI score0.00189EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/24 12:00 a.m.•31 views

PT-2026-4765

CVE-2026-24646 - Adobe Flash Player Unvalidated Redirect CVE ID : CVE-2026-24646 Published : Jan. 24, 2026, 4:15 a.m. | 1 hour, 8 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

5.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:17 p.m.•18 views

CVE-2025-69053

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.4...

7.1CVSS5.4AI score0.00214EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:17 p.m.•14 views

CVE-2025-69048

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.4...

7.1CVSS5.4AI score0.00214EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/23 9:17 p.m.•19 views

CVE-2025-32123

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Video Player with Playlist & Multiple Skins lbg-vp2-html5-rightside allows Reflected XSS.This issue affects HTML5 Video Player with Playlist & Multiple Skins: from n/a through =...

7.1CVSS5.4AI score0.00304EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/23 3:16 p.m.•13 views

CVE-2026-24548

Server-Side Request Forgery SSRF vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through = 2.0.91...

5.4CVSS0.00189EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/23 2:28 p.m.•8 views

CVE-2026-24548

Server-Side Request Forgery SSRF vulnerability in Prince Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through = 2.0.91...

5.3CVSS5.9AI score0.00189EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/23 2:28 p.m.•41 views

CVE-2026-24548 WordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through = 2.0.91...

5.4CVSS0.00189EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/23 2:28 p.m.•85 views

CVE-2026-24548

Summary: CVE-2026-24548 is a Server-Side Request Forgery (SSRF) vulnerability in the WordPress plugin “Radio Player” (radio-player) affecting versions up to and including 2.0.91. The issue is publicly documented by multiple sources (Wordfence vulnerability report and CVE/NVD entries). Impact is l...

5.4CVSS5.8AI score0.00189EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/23 2:28 p.m.•9 views

CVE-2026-24548 WordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through = 2.0.91...

5.4CVSS5.8AI score0.00189EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/23 10:44 a.m.•18 views

WordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Radio Player versions = 2.0.91...

5.3CVSS5.4AI score0.00189EPSS
SaveExploits0Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/23 12:00 a.m.•3 views

CVE-2026-24548: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in princeahmed Radio Player radio-player allows Server Side Request Forgery.This issue affects Radio Player: from n/a through = 2.0.91...

5.4CVSS5.8AI score0.00189EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/23 12:00 a.m.•22 views

WordPress plugin Radio Player code vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

5.4CVSS5.9AI score0.00189EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•16 views

PT-2026-4392

Name of the Vulnerable Software and Affected Versions Prince Radio Player versions through 2.0.91 Description A Server-Side Request Forgery SSRF vulnerability exists in Prince Radio Player. This issue allows for Server Side Request Forgery. Recommendations Update to a version later than 2.0.91...

5.3AI score0.00189EPSS
SaveExploits0References3
Rows per page
Query Builder