WordPress Music Player for Elementor – Audio Player & Podcast Player Plugin < 1.5.9.9 is vulnerable to Cross Site Scripting (XSS)

Software Music Player for Elementor – Audio Player & Podcast Player Type Plugin Vulnerable versions 1.5.9.9 Fixed in 1.5.9.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID...

WordPress Quick Audio Player – Best HTML5 Audio Player Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Quick Audio Player – Best HTML5 Audio Player Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 1caa9fec69d5 Credits Rafie...

CVE-2023-20942

In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2023-20942

In openMmapStream of AudioFlinger.cpp, there is a possible way to record audio without displaying the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

Microsoft Windows Multiple Vulnerabilities (KB5028169)

This host is missing an important security update according to Microsoft KB5028169 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5028168)

This host is missing an important security update according to Microsoft KB5028168 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-35303

USB Audio Class System Driver Remote Code Execution Vulnerability...

CVE-2023-35303

USB Audio Class System Driver Remote Code Execution Vulnerability...

CVE-2023-35303

USB Audio Class System Driver Remote Code Execution Vulnerability...

Remote code execution

USB Audio Class System Driver Remote Code Execution Vulnerability...

CVE-2023-35303

CVE-2023-35303 concerns the USB Audio Class System Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS‑3.1 score of 8.8 (High) with Network attack vector, Low attack complexity, Low privileges required, and no user interaction. The impact is rated as High ...

CVE-2023-35303 USB Audio Class System Driver Remote Code Execution Vulnerability

...

CVE-2023-35303 USB Audio Class System Driver Remote Code Execution Vulnerability

...

PT-2023-3533 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the USB Audio Class System Driver of Windows operating systems. This allows a remote attacker to execute arbitrary code on the syste...

Microsoft USB Audio Class System Driver 安全漏洞

Microsoft USB Audio Class System Driver is an AVStream microdriver from Microsoft Corporation USA. A security vulnerability exists in Microsoft USB Audio Class System Driver. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are affected:...

GHSA-MRR8-V49W-3333 sweetalert2 contains potentially undesirable behavior

sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme...

sweetalert2 contains potentially undesirable behavior

sweetalert2 versions from 11.6.14 to before 11.22.4 have potentially undesirable behavior. The package outputs audio and/or video messages that do not pertain to the functionality of the package when run on specific tlds. This functionality is documented on the project's readme...

CVE-2023-26590

A floating point exception vulnerability was found in sox, in the lsxaiffstartwrite function at sox/src/aiff.c:622:58. This flaw can lead to a denial of service...

SoX 安全漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting, and recording audio in multiple formats. A security vulnerability exists in SoX, which stems from a floating-point exception vulnerability in the readsamples function, which could lead to a denial of...

SoX 缓冲区错误漏洞

SoX is a set of open source audio processing tools. The product supports playing, converting and recording audio in multiple formats. A security vulnerability exists in sox that stems from a heap buffer overflow issue found in the sxreadbuf function located in sox/src/formatsi.c:98:16, which coul...