EUVD-2025-37059

Malicious code in player-support-tools-ui npm...

Malicious code in epic-web-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41136c89076d65b05c642e97a8f22ff9dd61e42848e70ee4203e4ead6041db7 The package epic-web-video-player was found to contain malicious code...

Malicious code in player-support-tools-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e35bb951aab567fdb15daabc8db34691f937b3fefbf102bc1e19657c88aa72 The package player-support-tools-ui was found to contain malicious code...

EUVD-2025-37082

Malicious code in epic-video-player npm...

Malicious code in epic-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09900ffe788921c8e9cdf667d912841a8032050d94b41701de06248042e30650 The package epic-video-player was found to contain malicious code...

EUVD-2025-37075

Malicious code in epic-web-video-player npm...

MAL-2025-49218 Malicious code in epic-web-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d41136c89076d65b05c642e97a8f22ff9dd61e42848e70ee4203e4ead6041db7 The package epic-web-video-player was found to contain malicious code...

MAL-2025-49211 Malicious code in epic-video-player (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09900ffe788921c8e9cdf667d912841a8032050d94b41701de06248042e30650 The package epic-video-player was found to contain malicious code...

MAL-2025-49234 Malicious code in player-support-tools-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e35bb951aab567fdb15daabc8db34691f937b3fefbf102bc1e19657c88aa72 The package player-support-tools-ui was found to contain malicious code...

CVE-2025-62908

Missing Authorization vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Podlove Web Player: from n/a through = 5.9.1...

EUVD-2025-36031

Missing Authorization vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Podlove Web Player: from n/a through = 5.9.1...

CVE-2025-62908

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-62908

...

CVE-2025-62908

...

CVE-2025-62908

CVE-2025-62908 is associated with a Missing Authorization vulnerability in Podlove Web Player (podlove-web-player), allowing access to functionality not properly constrained by ACLs. A Red Hat advisory describes the issue as missing authorization in Podlove Web Player with impact on Podlove Web P...

PT-2025-43786

Missing Authorization vulnerability in gerritvanaaken Podlove Web Player podlove-web-player allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Podlove Web Player: from n/a through = 5.9.1...

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress All in One Music Player plugin path traversal vulnerability

WordPress All in One Music Player plugin is a plugin with integrated music playback functionality, mainly used for WooCommerce, Dokan, WCFM Marketplace and other multi-platform e-commerce systems. A path traversal vulnerability exists in the WordPress All in One Music Player plugin, which stems...

CVE-2025-61788

Opencast is a free, open-source platform to support the management of educational audio and video content. Prior to Opencast 17.8 and 18.2, the paella would include and render some user inputs metadata like title, description, etc. unfiltered and unmodified. The vulnerability allows attackers to...

Opencast's Paella Player 7 is vulnerable to Cross-Site Scripting

Prior to Opencast 17.8 and 18.2 the paella would include and render some user inputs metadata like title, description, etc. unfiltered and unmodified. Impact The vulnerability allows attackers to inject and malicious HTML and JavaScript in the player, which would then be executed in the browsers ...