Lucene search
+L

5242 matches found

Patchstack
Patchstack
•added 2025/01/16 6:41 p.m.•14 views

WordPress HSS Embed Streaming Video plugin <= 3.23 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin HSS Embed Streaming Video versions = 3.23...

7.1CVSS6.1AI score0.00308EPSS
SaveExploits0Affected Software1
Akamai Blog
Akamai Blog
•added 2025/01/15 10:20 a.m.•9 views

Live Streaming with Akamai’s Distributed Compute Regions

...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/01/10 12:00 a.m.•19 views

Suricata Heap Buffer Overflow DoS

The vulnerability of the StreamingBufferSlideToOffsetWithRegions function in the Suricata intrusion detection and prevention system is related to the execution of operations outside of the buffer’s memory boundaries. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

5.9CVSS8.3AI score0.01014EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2025/01/07 4:21 a.m.•73 views

CVE-2024-12214

CVE-2024-12214 affects the WooCommerce HSS Extension for Streaming Video (WordPress). The vulnerability is a reflected Cross-Site Scripting (Reflected XSS) via the videolink parameter in all versions up to and including 3.31, caused by insufficient input sanitization and output escaping. Exploita...

6.1CVSS6AI score0.00293EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•17 views

PT-2025-1783 · WordPress · Woocommerce Hss Extension For Streaming Video

Name of the Vulnerable Software and Affected Versions: WooCommerce HSS Extension for Streaming Video plugin versions up to and including 3.31 Description: The issue is related to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web script...

6.1CVSS7.5AI score0.00293EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•4 views

CVE-2024-12214: Improper Neutralization of Input During Web Page Generation

The WooCommerce HSS Extension for Streaming Video plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘videolink’ parameter in all versions up to, and including, 3.31 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

6.1CVSS6AI score0.00293EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/07 12:00 a.m.•21 views

WordPress plugin WooCommerce HSS Extension for Streaming Video 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.1CVSS7.7AI score0.00293EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•22 views

PT-2025-36308

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where a kernel crash can occur due to trying to copy to unmapped memory. This happens when a program is streaming video and another program changes the...

8.5CVSS6.1AI score0.00172EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•15 views

PT-2025-49261

Name of the Vulnerable Software and Affected Versions urllib3 versions 1.0 through 2.5.16 Description urllib3 is a Python HTTP client library. Versions prior to 2.6.0 have an issue in the Streaming API where it improperly handles highly compressed data. The decompression logic can cause excessive...

8.9CVSS6.7AI score0.00682EPSS
SaveExploits0References169
attackerkb
attackerkb
•added 2024/12/31 3:15 p.m.•8 views

CVE-2023-6603

A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

7.5CVSS5.7AI score0.00573EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/12/31 12:00 a.m.•14 views

PT-2024-15024

Name of the Vulnerable Software and Affected Versions FFmpeg affected versions not specified Description A flaw was found in FFmpeg's HLS playlist parsing, allowing a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference during initialization...

7.8CVSS5.7AI score0.00573EPSS
SaveExploits2References52
BDU FSTEC
BDU FSTEC
•added 2024/12/24 12:00 a.m.•20 views

Streaming Service Synology Media Server File Read

The vulnerability of the Streaming Service in Synology Media Server lies in the ability to bypass authentication by using a user-controlled key. Exploiting this vulnerability allows an attacker to remotely access and read arbitrary files...

7.8CVSS5.6AI score0.00556EPSS
SaveExploits0References3Affected Software1
Fedora
Fedora
•added 2024/12/22 2:13 a.m.•20 views

[SECURITY] Fedora 40 Update: mingw-gstreamer1-plugins-bad-free-1.24.10-1.fc40

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

9.8CVSS7.4AI score0.01728EPSS
SaveExploits2
Fedora
Fedora
•added 2024/12/22 2:13 a.m.•27 views

[SECURITY] Fedora 40 Update: mingw-gstreamer1-plugins-base-1.24.10-1.fc40

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

9.8CVSS7.2AI score0.01728EPSS
SaveExploits2
Fedora
Fedora
•added 2024/12/22 2:03 a.m.•26 views

[SECURITY] Fedora 41 Update: mingw-gstreamer1-plugins-good-1.24.10-1.fc41

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

9.8CVSS7.2AI score0.01728EPSS
SaveExploits2
CNNVD
CNNVD
•added 2024/12/20 12:00 a.m.•23 views

Stardust 访问控制错误漏洞

Stardust is a spaceness open source platform for streaming isolated desktop containers. An access control error vulnerability exists in Stardust. An attacker exploiting this vulnerability could access another container's proxy...

9.3CVSS6.5AI score0.00501EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/18 6:15 a.m.•23 views

CVE-2024-4464

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors...

7.5CVSS0.00556EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•6 views

CVE-2024-4464: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key vulnerability in streaming service in Synology Media Server before 1.4-2680, 2.0.5-3152 and 2.2.0-3325 allows remote attackers to read specific files via unspecified vectors...

7.5CVSS5.9AI score0.00556EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/12/18 12:00 a.m.•29 views

RHEL 9 : gstreamer1-plugins-base (RHSA-2024:11123)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:11123 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages conta...

9.8CVSS7.9AI score0.01274EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2024/12/12 12:15 p.m.•17 views

CVE-2024-54114

Out-of-bounds access vulnerability in playback in the DASH module Impact: Successful exploitation of this vulnerability will affect availability...

7.5CVSS5.8AI score0.0017EPSS
SaveExploits0References1
Rows per page
Query Builder