Lucene search
K

11 matches found

NVD
NVD
added 2026/01/27 7:16 p.m.4 views

CVE-2026-0746

The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the 'getaudio' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations...

6.4CVSS0.00045EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/27 6:27 p.m.3 views

CVE-2026-0746 AI Engine <= 3.3.2 - Authenticated (Subscriber+) Server-Side Request Forgery

The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the 'getaudio' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations...

6.4CVSS5.9AI score0.00045EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.2 views

PT-2026-4993

The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the 'get audio' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations...

6.4CVSS5.9AI score0.00045EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/04/09 12:0 a.m.1 views

LG webOS 操作系统命令注入漏洞

LG webOS is a Linux kernel-based smart TV operating system from LG Corporation in South Korea. An OS command injection vulnerability exists in LG webOS, which originates from an OS command injection vulnerability in the getAudioMetadata method of the com.webos.service.attachedstoragemanager...

9.1CVSS7.7AI score0.10785EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2023/11/01 12:0 a.m.2 views

PT-2023-9036

Name of the Vulnerable Software and Affected Versions webOS versions 4 through 7 Description A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service. This vulnerability can be triggered by a series of specially crafted...

9.1CVSS6AI score0.10785EPSS
Exploits3References22
SUSE CVE
SUSE CVE
added 2023/02/15 4:44 a.m.1 views

SUSE CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

5.5CVSS6.7AI score0.02992EPSS
Exploits3References6
CNVD
CNVD
added 2017/10/09 12:0 a.m.2 views

LAME Stack Buffer Overflow Vulnerability

LAME is LAME team developed a set of open source MP3 audio compression software . A stack buffer overflow vulnerability exists in the frontend/getaudio.c file in LAME version 3.99.5. A remote attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS7.4AI score0.00164EPSS
Exploits3References1
OSV
OSV
added 2017/10/06 4:29 a.m.1 views

DEBIAN-CVE-2017-15046

LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpackreadsamples in frontend/getaudio.c, a different vulnerability than CVE-2017-9412...

5.5CVSS7.6AI score0.00164EPSS
Exploits3References1
CNVD
CNVD
added 2017/07/28 12:0 a.m.1 views

LAME Denial of Service Vulnerability (CNVD-2017-20144)

LAME is LAME team developed a set of open source MP3 audio compression software . A denial of service vulnerability exists in the 'unpackreadsamples' function in the frontend/getaudio.c file in LAME version 3.99.5. A remote attacker can exploit this vulnerability to cause a denial of service...

5.5CVSS6.7AI score0.02992EPSS
Exploits3References1
OSV
OSV
added 2017/07/27 6:29 a.m.1 views

UBUNTU-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

5.5CVSS6.8AI score0.02992EPSS
Exploits3References4
OSV
OSV
added 2017/07/27 6:29 a.m.1 views

DEBIAN-CVE-2017-9412

The unpackreadsamples function in frontend/getaudio.c in LAME 3.99.5 allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted wav file...

5.5CVSS6.9AI score0.02992EPSS
Exploits3References1
Rows per page
Query Builder