21323 matches found
CVE-2024-13561 Target Video Easy Publish <= 3.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
The Target Video Easy Publish plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bridoverrideyt shortcode in all versions up to, and including, 3.8.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
drm/rockchip: vop: Fix a dereferenced before check warning
...
media: imx-jpeg: Set video drvdata before register video device
...
media: amphion: Set video drvdata before register video device
...
SUSE CVE-2024-56515
Matrix Media Repo MMR is a highly configurable multi-homeserver media repository for Matrix. If SVG or JPEGXL thumbnailers are enabled they are disabled by default, a user may upload a file which claims to be either of these types and request a thumbnail to invoke a different decoder in...
WordPress plugin Target Video Easy Publish 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
The vulnerability of the imagination AI image and video generation generator, related to server blocking, allows a violator to trigger a service failure.
The vulnerability of the imagination AI image and video generation service is related to a server crash due to uncontrolled resource consumption during the processing of the api/stablestudio/generate endpoint. Exploiting this vulnerability could allow an attacker to cause a service outage by...
The vulnerability in the `drivers/media/platform/aspeed-video.c` component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the drivers/media/platform/aspeed-video.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2024-56954
An issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows attackers to access sensitive user information via supplying a crafted link...
WordPress Target Video Easy Publish plugin <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability
Cross-Site Request Forgery to Stored Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin Target Video Easy Publish versions = 3.8.3...
CVE-2024-56954
Technical details about CVE-2024-56954 are not publicly provided in the supplied documents. No concrete affected components, versions beyond Haokan Video iOS 7.70.0, exploit steps, or fixes are given. Monitor for updates.
PT-2025-3358 · Baidu · Haokan Video
Name of the Vulnerable Software and Affected Versions: Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS version 7.70.0 Description: The issue allows attackers to access sensitive user information via supplying a crafted link. Recommendations: For version 7.70.0, consider avoiding...
Baidu Haokan Video 安全漏洞
Baidu Haokan Video 好看视频 is a video software from the Chinese company Baidu. A security vulnerability exists in Baidu Haokan Video version 7.70.0 that originates from an attacker being able to access sensitive user information by providing a carefully crafted link...
CVE-2024-56954
An issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-56954
An issue in Beijing Baidu Netcom Science & Technology Co Ltd Haokan Video iOS 7.70.0 allows attackers to access sensitive user information via supplying a crafted link...
CVE-2024-12076
The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resynccarousel, seeksnapshot, uploadedcc, and removecc functions. This makes it possible for...
CVE-2024-12076 Target Video Easy Publish <= 3.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
The Target Video Easy Publish plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.3. This is due to missing or incorrect nonce validation on the resynccarousel, seeksnapshot, uploadedcc, and removecc functions. This makes it possible for...
WordPress plugin Target Video Easy Publish 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
DEBIAN-CVE-2024-57184
An issue was discovered in GPAC v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tsprocesspmt in mediatools/mpegts.c:2163 that can cause a denial of service DOS via a crafted MP4 file...