76 matches found
CVE-2021-40063
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2021-40063
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2021-40063
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality...
Improper access control
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality...
HUAWEI EMUI/Magic UI security vulnerabilities
Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. a security vulnerability exists in Huawei Emui and Magic UI, which stems from improper access control of the video module. An attacker could exploit this vulnerability to...
CVE-2021-40063
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality...
CVE-2021-40063
Technical details for CVE-2021-40063 are not publicly available in the provided documents. Monitor for updates.
CVE-2021-40063: Undefined Security Weakness
There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality...
PT-2022-11184
Name of the Vulnerable Software and Affected Versions Video module affected versions not specified Description The issue is related to improper access control in the video module, which could impact confidentiality if successfully exploited. Recommendations At the moment, there is no information...
PHP Melody v3.0 - (submitted) Persistent XSS Vulnerability
Document Title: =============== PHP Melody v3.0 - submitted Persistent XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2292 Bulletin: https://www.phpsugar.com/blog/2021/09/php-melody-3-0-vulnerability-report-fix/ Release Date:...
PT-2021-7406 · Qualcomm · Qualcomm Snapdragon Mobile +5
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto versions affected versions not specified Qualcomm Snapdragon Compute versions affected versions not specified Qualcomm Snapdragon Connectivity versions affected versions not specified Qualcomm Snapdragon Industrial IO...
armlsblog.com XSS vulnerability
Open Bug Bounty ID: OBB-625537 Description| Value ---|--- Affected Website:| armlsblog.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
PHPCMS /phpcms/modules/video/video_for_ck.php SQL注入
No description provided by source...
CVE-2015-3362
Cross-site scripting XSS vulnerability in the Video module before 7.x-2.11 for Drupal, when using the video WYSIWYG plugin, allows remote authenticated users to inject arbitrary web script or HTML via a node title...
Cross site scripting
Cross-site scripting XSS vulnerability in the Video module before 7.x-2.11 for Drupal, when using the video WYSIWYG plugin, allows remote authenticated users to inject arbitrary web script or HTML via a node title...
CVE-2015-3362
Cross-site scripting XSS vulnerability in the Video module before 7.x-2.11 for Drupal, when using the video WYSIWYG plugin, allows remote authenticated users to inject arbitrary web script or HTML via a node title...
CVE-2015-3362
CVE-2015-3362 affects Drupal’s Video module (7.x-2.x) prior to 7.x-2.11. The vulnerability arises from insufficient sanitization of node titles when using the video WYSIWYG plugin, enabling XSS by remote authenticated users. Affected versions are Video 7.x-2.x from 7.x-2.2-beta1 through 7.x-2.10....
CVE-2015-3362: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the Video module before 7.x-2.11 for Drupal, when using the video WYSIWYG plugin, allows remote authenticated users to inject arbitrary web script or HTML via a node title...
PT-2015-6183
Name of the Vulnerable Software and Affected Versions Drupal Video module versions prior to 7.x-2.11 Description A cross-site scripting XSS issue exists in the Video module for Drupal. This occurs when the video WYSIWYG plugin is used, allowing remote authenticated users to inject arbitrary web...
Multiple Cross-Site Scripting Vulnerabilities in Drupal Video Module
Drupal is a free and open source content management system developed in PHP. Multiple cross-site scripting vulnerabilities exist in the Drupal Video module because it fails to properly filter user-supplied input. An attacker could potentially exploit these vulnerabilities to execute arbitrary...