Lucene search
+L

28158 matches found

Cvelist
Cvelist
added 2026/01/22 4:52 p.m.31 views

CVE-2025-69053 WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.4...

7.1CVSS0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.5 views

CVE-2025-69048 WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.4...

7.1CVSS5.9AI score0.00191EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.23 views

CVE-2025-69048

CVE-2025-69048 — WordPress Universal Video Player (LambertGroup) (versions ≤ 3.8.4) : The issue is a Reflected XSS caused by improper input neutralization during web page generation. Public entries (NVD/Red Hat/CVE List) confirm the vulnerability and affected range. Exploitation status is not det...

7.1CVSS5.4AI score0.00191EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.7 views

CVE-2025-69048

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.4...

7.1CVSS5.2AI score0.00191EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.31 views

CVE-2025-69048 WordPress Universal Video Player plugin <= 3.8.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.4...

7.1CVSS0.00191EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:51 p.m.5 views

CVE-2025-32123

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Video Player with Playlist & Multiple Skins lbg-vp2-html5-rightside allows Reflected XSS.This issue affects HTML5 Video Player with Playlist & Multiple Skins: from n/a through =...

6.1CVSS5.3AI score0.0028EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/22 4:51 p.m.21 views

CVE-2025-32123

CVE-2025-32123 describes a Reflected XSS in the WordPress plugin HTML5 Video Player with Playlist & Multiple Skins (lbg-vp2-html5-rightside) , affecting versions up to and including 5.3.5. The issue stems from improper input neutralization during web page generation, enabling script injection via...

7.1CVSS5.4AI score0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.32 views

CVE-2025-32123 WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Video Player with Playlist & Multiple Skins lbg-vp2-html5-rightside allows Reflected XSS.This issue affects HTML5 Video Player with Playlist & Multiple Skins: from n/a through =...

7.1CVSS0.0028EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:51 p.m.4 views

CVE-2025-32123 WordPress HTML5 Video Player with Playlist & Multiple Skins plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Video Player with Playlist & Multiple Skins lbg-vp2-html5-rightside allows Reflected XSS.This issue affects HTML5 Video Player with Playlist & Multiple Skins: from n/a through =...

7.1CVSS5.9AI score0.0028EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/01/22 4:51 p.m.33 views

CVE-2025-27005 WordPress HTML5 Video Player plugin <= 5.3.5 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup HTML5 Video Player lbg-vp2-html5-bottom allows Reflected XSS.This issue affects HTML5 Video Player: from n/a through = 5.3.5...

7.1CVSS0.00191EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.18 views

WordPress Plugin HTML5 Video Player Cross-Site Script Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

7.1CVSS5.7AI score0.00191EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.12 views

PT-2026-3958

Name of the Vulnerable Software and Affected Versions LambertGroup HTML5 Video Player versions through 5.3.5 Description A Reflected Cross-site Scripting XSS issue exists in LambertGroup HTML5 Video Player lbg-vp2-html5-bottom due to improper neutralization of input during web page generation. Th...

5.8AI score0.00191EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.20 views

PT-2026-4136

Name of the Vulnerable Software and Affected Versions LambertGroup Universal Video Player versions through 3.8.4 Description The Universal Video Player software contains a flaw related to improper input handling during web page generation, which allows for Reflected Cross-site Scripting XSS. This...

5.3AI score0.00191EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/22 12:00 a.m.16 views

PT-2026-4141

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LambertGroup Universal Video Player universal-video-player allows Reflected XSS.This issue affects Universal Video Player: from n/a through = 3.8.4...

5.4AI score0.00191EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.16 views

WordPress plugin Universal Video Player has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.7AI score0.00191EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.15 views

WordPress plugin Universal Video Player has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.7AI score0.00191EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/01/20 12:28 a.m.43 views

SUSE CVE-2025-51602

mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...

4.8CVSS5.4AI score0.00414EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/20 12:00 a.m.21 views

PT-2026-4332

CVE-2026-23911 - Adobe Flash Player Unserialize Buffer Overflow CVE ID : CVE-2026-23911 Published : Jan. 20, 2026, 5:16 a.m. | 1 hour, 29 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

5.4AI score
SaveExploits0References1
OSV
OSV
added 2026/01/16 6:16 p.m.13 views

UBUNTU-CVE-2025-51602

mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...

4.8CVSS5.8AI score0.00414EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:00 a.m.16 views

MiracleLinux 7 : fltk-1.3.4-1.el7, tigervnc-1.8.0-1.el7 (AXSA:2017-2026:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2026:01 advisory. fltk FLTK pronounced fulltick is a cross-platform C GUI toolkit. It provides modern GUI functionality without the bloat, and supports 3D graphics vi...

9.8CVSS7.4AI score0.04247EPSS
SaveExploits1References10
Rows per page
Query Builder