Lucene search
+L

21197 matches found

RedhatCVE
RedhatCVE
added 2025/08/22 8:31 a.m.8 views

CVE-2025-48170

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affects Universal Video Player - Addon for...

7.1CVSS5.9AI score0.00229EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 8:31 a.m.8 views

CVE-2025-54044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

7.1CVSS5.9AI score0.00244EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.6 views

CVE-2025-53563

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Youtube Vimeo Video Player and Slider videoplayeryoutubevimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player and Slider: from n/a through = 3.8...

7.1CVSS5.9AI score0.00243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.11 views

CVE-2025-53559

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbg-universal-video-player-addon-visual-composer allows Reflected XSS.This issue affects Universal Video Player - Addon for...

7.1CVSS5.9AI score0.00228EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.5 views

CVE-2025-53212

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Revolution Video Player With Bottom Playlist revolution-video-player allows Reflected XSS.This issue affects Revolution Video Player With Bottom Playlist: from n/a through = 2.9.2...

7.1CVSS5.9AI score0.00243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.9 views

CVE-2025-53562

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbguniversalvideoplayeraddonvisualcomposer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery...

7.1CVSS5.9AI score0.00243EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.9 views

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime 安全漏洞

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime is a smart wired WiFi video doorbell from Reolink USA. A security vulnerability exists in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.46622503122283, which originates from a command injection in the...

9.8CVSS7.4AI score0.01701EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.6 views

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime 安全漏洞

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime is a smart wired WiFi video doorbell from Reolink USA. A security vulnerability exists in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.46622503122283, which stems from an insecure direct object reference that cou...

5.3CVSS6.6AI score0.00238EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/22 12:00 a.m.27 views

CVE-2025-55634

The vulnerability CVE-2025-55634 affects the Reolink Smart 2K+ Plug-in Wi‑Fi Video Doorbell with Chime (firmware v3.0.0.4662_2503122283). The root cause is incorrect access control in the RTMP server settings, enabling an unauthenticated attacker to cause a Denial of Service by initiating a large...

7.5CVSS6.6AI score0.00515EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2025/08/22 12:00 a.m.7 views

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime 安全漏洞

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime is a smart wired WiFi video doorbell from Reolink USA. A security vulnerability exists in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime version 3.0.0.46622503122283, which stems from insufficient privilege validation and could...

5.3CVSS6.7AI score0.00238EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.20 views

CVE-2025-55634

Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to cause a Denial of Service DoS via initiating a large number of simultaneous ffmpeg-based stream pushes...

0.00515EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-47183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GStreamer through 1.26.1, the isomp4 plugin's qtdemuxparsetree function may read past the end of a heap buffer while parsing an MP4 file, leading to...

6.6CVSS6.2AI score0.00199EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2025/08/21 5:51 a.m.9 views

WordPress Video Gallery – Vimeo and YouTube Gallery plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Prissy Patchstack Alliance in WordPress Plugin Video Gallery – Vimeo and YouTube Gallery versions = 1.1.7...

6.5CVSS5.9AI score0.0021EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/21 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-40476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

8.8CVSS7.8AI score0.02009EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/21 12:00 a.m.11 views

PT-2025-46640

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.16.0-rc4-next-20250704-06511-gff0e002d480a Description The Linux kernel contains an issue within the nxp imx8-isi m2m subsystem. An imbalance in streamon/streamoff calls, such as exiting an application with...

4.6CVSS5.4AI score0.00142EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2025/08/20 9:05 a.m.8 views

Moderate: Red Hat Security Advisory: libvpx security update

An update for libvpx is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.1CVSS7.2AI score0.00814EPSS
SaveExploits1References2
NVD
NVD
added 2025/08/20 8:15 a.m.14 views

CVE-2025-54044

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMedia Elite Video Player elite-video-player allows Reflected XSS.This issue affects Elite Video Player: from n/a through = 10.0.5...

7.1CVSS0.00244EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.5 views

CVE-2025-53563

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Youtube Vimeo Video Player and Slider videoplayeryoutubevimeo allows Reflected XSS.This issue affects Youtube Vimeo Video Player and Slider: from n/a through = 3.8...

7.1CVSS0.00243EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.12 views

CVE-2025-53562

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player - Addon for WPBakery Page Builder lbguniversalvideoplayeraddonvisualcomposer allows Reflected XSS.This issue affects Universal Video Player - Addon for WPBakery...

7.1CVSS0.00243EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.5 views

CVE-2025-53212

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Revolution Video Player With Bottom Playlist revolution-video-player allows Reflected XSS.This issue affects Revolution Video Player With Bottom Playlist: from n/a through = 2.9.2...

7.1CVSS0.00243EPSS
SaveExploits0References1
Rows per page
Query Builder