Cross-site Scripting (XSS)

starcitizenwiki/embedvideo is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper restriction of HTML attributes in the video embedding functionality, which allows an attacker to inject and execute arbitrary web scripts through crafted wikitext...

CVE-2025-12563 Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to limited file upload due to an incorrect capability check on theuploadVideo function in all versions up to, and including, 8.6.0. This makes it possible for authenticated attackers, with Subscriber-level acce...

CVE-2025-12563 Blog2Social: Social Media Auto Post & Scheduler <= 8.6.0 - Incorrect Authorization to Video File Upload

The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to limited file upload due to an incorrect capability check on theuploadVideo function in all versions up to, and including, 8.6.0. This makes it possible for authenticated attackers, with Subscriber-level acce...

CVE-2025-12563

CVE-2025-12563 affects Blog2Social: Social Media Auto Post & Scheduler for WordPress (versions up to 8.6.0). The vulnerability arises from an incorrect capability check in the uploadVideo() function, enabling authenticated users with Subscriber level access and above to upload MP4 files to wp-con...

[SECURITY] Fedora 42 Update: qt5-qtmultimedia-5.15.18-1.fc42

The Qt Multimedia module provides a rich feature set that enables you to easily take advantage of a platforms multimedia capabilites and hardware. This ranges from the playback and recording of audio and video content to the use of available devices like cameras and radios...

MGASA-2025-0264 Updated gstreamer1.0-plugins-bad packages fix security vulnerability

GStreamer H265 Codec Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. CVE-2025-3887...

CVE-2025-64114

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

The vulnerability of the vdec_h264SliceDecode() function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdec_h264_req_if.c file of the Linux kernel-based multimedia device support driver allows a remote attacker to trigger a service denial.

The vulnerability of the vdech264sliceDecode function in the drivers/media/platform/mediatek/vcodec/decoder/vdec/vdech264reqif.c file of the Linux kernel-based multimedia device support driver is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2025-63560

CVE-2025-63560 affects KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v1.20.0006. A remote attacker can cause a denial of service via the systemctrl API, System/reFactory component. Public details confirm the vulnerability and affected version; no exploit specifics are provide...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990560 advisory. In the Linux kernel, the following vulnerability has been resolved: fbmon: prevent division by zero in fbvideomodefromvideomode The expression htotal vtotal can have...

WordPress plugin Blog2Social 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990465 advisory. In the Linux kernel, the following vulnerability has been resolved: media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990455)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990455 advisory. In the Linux kernel, the following vulnerability has been resolved: video: fbdev: nvidiafb: Use strscpy to prevent buffer overflow Coverity complains of a possible...

EUVD-2025-37959

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

CVE-2025-64114 ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...

Important: nvidia-driver

Issue Overview: NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. CVE-2025-23280...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988952)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988952 advisory. In the Linux kernel, the following vulnerability has been resolved: media: staging: media: zoran: move videodev alloc Move some code out of zr36057init and create ne...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989517)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989517 advisory. In the Linux kernel, the following vulnerability has been resolved: media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989604)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989604 advisory. In the Linux kernel, the following vulnerability has been resolved: media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED If the callback...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988874)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988874 advisory. In the Linux kernel, the following vulnerability has been resolved: fbmem: Do not delete the mode that is still in use The execution of fbdeletevideomode is not base...