Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2010-4250

Malware in sbrugna...

4.3CVSS6.3AI score0.00153EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/03/01 12:0 a.m.2 views

PT-2025-9158 · WordPress · The Page Builder By Siteorigin

Name of the Vulnerable Software and Affected Versions: The Page Builder by SiteOrigin plugin for WordPress versions up to, and including, 2.31.4 Description: The issue is related to Stored Cross-Site Scripting via the Embedded VideoPB widget due to insufficient input sanitization and output...

6.4CVSS6.2AI score0.00114EPSS
Exploits0References10
Cvelist
Cvelist
added 2023/12/11 11:52 a.m.19 views

CVE-2023-6185 Improper input validation enabling arbitrary Gstreamer pipeline injection

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to r...

8.3CVSS9AI score0.01439EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2023/12/11 12:0 a.m.23 views

CVE-2023-6185

Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to r...

8.8CVSS7.3AI score0.01439EPSS
Exploits0References4
Hacker One
Hacker One
added 2014/05/25 1:46 p.m.27 views

Mail.ru: api.video.mail.ru: XSS

Тэг скрипт за собой прикрываешь, и поехали писать свое : GET /videos/embed/corp/lady/602/1171.html?autoplay=1745baalert114f95&rbAdvertismentSlotOverride=5485&wmode=opaque HTTP/1.1 Host: api.video.mail.ru Accept: / Accept-Language: en User-Agent: Mozilla/5.0 compatible; MSIE 9.0; Windows NT 6.1;...

2.3AI score
Exploits0
NVD
NVD
added 2010/12/22 9:0 p.m.9 views

CVE-2010-4277

Cross-site scripting XSS vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php...

4.3CVSS5.8AI score0.00153EPSS
Exploits1References3
Prion
Prion
added 2010/12/22 9:0 p.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php...

4.3CVSS6.2AI score0.00153EPSS
Exploits1References3Affected Software1
Packet Storm
Packet Storm
added 2010/12/17 12:0 a.m.41 views

Embedded Video WordPress Plugin Cross Site Scripting

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Embedded Video WordPress Plugin Cross Site Scripting Vulnerability CVE-2010-4277 INTRODUCTION Embedded Video is a WordPress Plugin created by Jovel Stefan to easily embedded videos in blog post...

4.3CVSS0.3AI score0.00153EPSS
Exploits1
Patchstack
Patchstack
added 2010/11/17 12:0 a.m.19 views

WordPress Embedded Video Plugin <= 4.1 - XSS

Because of this vulnerability in lembedded-video.php, the attackers can inject arbitrary web script or HTML via the "content" parameter to wp-admin/post.php. Solution Update the plugin...

4.3CVSS2.9AI score0.00153EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder