Lucene search
+L

21324 matches found

CNNVD
CNNVD
added 2024/12/16 12:00 a.m.10 views

WordPress plugin Floating Video Player 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forgery...

7.1CVSS8.5AI score0.00206EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.9 views

PT-2024-36257 · Unknown · Suiteplugins Video & Photo Gallery

Name of the Vulnerable Software and Affected Versions: SuitePlugins Video & Photo Gallery for Ultimate Member versions n/a through 1.1.0 Description: The issue allows uploading a Web Shell to a web server due to unrestricted file upload with dangerous types. This enables potential attackers to...

9.9CVSS7.4AI score0.00646EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.8 views

WordPress plugin Video & Photo Gallery for Ultimate Member 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue exists in the WordPress plugin...

9.9CVSS8.7AI score0.00646EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.6 views

PT-2024-36310 · Unknown · Sanjay Singh Negi Floating Video Player

Name of the Vulnerable Software and Affected Versions: Sanjay Singh Negi Floating Video Player versions 1.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended...

7.1CVSS6.1AI score0.00206EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.9 views

PT-2024-36295 · Unknown · Youtube Video Grid

Name of the Vulnerable Software and Affected Versions: Jake H. Youtube Video Grid versions n/a through 1.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability, which can be exploited due to incorrectly configured access control security levels. This allows for the...

6.5CVSS7.4AI score0.00382EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.11 views

WordPress plugin Youtube Video Grid 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

6.5CVSS8.5AI score0.00382EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.25 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in buffer overflows in the stack, which allows attackers to trigger a service failure.

The vulnerability of Adobe After Effects’ video and dynamic image editing software relates to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS5.8AI score0.00459EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/12/14 5:15 a.m.11 views

CVE-2024-11883

The Connatix Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cnxscriptcode' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00276EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/12/14 4:23 a.m.8 views

CVE-2024-11883 Connatix Video Embed <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Connatix Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cnxscriptcode' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.8AI score0.00276EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/12/14 4:23 a.m.21 views

CVE-2024-11883 Connatix Video Embed <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Connatix Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'cnxscriptcode' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00276EPSS
SaveExploits0References2
CVE
CVE
added 2024/12/14 4:23 a.m.53 views

CVE-2024-11883

CVE-2024-11883 affects the Connatix Video Embed WordPress plugin. The vulnerability is a Stored XSS via the plugin shortcode cnx_script_code in versions up to and including 1.0.5, caused by insufficient input sanitization and output escaping on user-supplied attributes. Exploitation requires at l...

6.4CVSS5.7AI score0.00276EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/14 12:00 a.m.9 views

WordPress plugin Connatix Video Embed 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.4CVSS8AI score0.00276EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/12/13 8:59 p.m.8 views

WordPress Connatix Video Embed plugin <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin Connatix Video Embed versions = 1.0.5...

6.4CVSS5.7AI score0.00276EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/12/13 3:15 p.m.9 views

CVE-2023-25988

Missing Authorization vulnerability in Video Gallery by Total-Soft Video Gallery – YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Gallery – YouTube Gallery: from n/a through 1.7.6...

7.5CVSS0.00805EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/13 2:23 p.m.25 views

CVE-2023-25988 WordPress Video Gallery – YouTube Gallery plugin <= 1.7.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Video Gallery by Total-Soft Video Gallery – YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Video Gallery – YouTube Gallery: from n/a through 1.7.6...

7.5CVSS0.00805EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 2:23 p.m.55 views

CVE-2023-25988

The CVE-2023-25988 entry is about WordPress Video Gallery – YouTube Gallery plugin (

7.5CVSS8.6AI score0.00805EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.7 views

WordPress plugin Video Gallery – YouTube Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin.... WordPress plugin Video...

7.5CVSS8.6AI score0.00805EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/13 12:00 a.m.47 views

Adobe Premiere Pro Stack Overflow Vulnerability

Adobe Premiere Pro is a video editing software developed by Adobe. A security vulnerability exists in Adobe Premiere Pro version 25.0 and prior versions, which stems from the inclusion of a heap-based buffer overflow vulnerability. An attacker can exploit the vulnerability to cause arbitrary code...

7.8CVSS7.5AI score0.00498EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2024/12/12 1:45 p.m.8 views

WordPress Floating Video Player plugin <= 1.0 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Floating Video Player versions = 1.0...

7.1CVSS6.2AI score0.00206EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/12 12:49 p.m.8 views

WordPress Youtube Video Grid plugin <= 1.9 - CSRF to Settings Change vulnerability

CSRF to Settings Change vulnerability discovered by thiennv Patchstack Alliance in WordPress Plugin Youtube Video Grid versions = 1.9...

6.5CVSS7AI score0.00382EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder