Lucene search
K

239 matches found

RedhatCVE
RedhatCVE
added 2026/01/01 4:26 p.m.2 views

CVE-2025-62143

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through = 1.163...

4.3CVSS5.9AI score0.00034EPSS
Exploits0References1
NVD
NVD
added 2025/12/31 4:15 p.m.5 views

CVE-2025-62143

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through = 1.163...

4.3CVSS0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/31 3:49 p.m.3 views

EUVD-2025-206027

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through 1.163...

4.3CVSS6.3AI score0.00034EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/31 3:49 p.m.3 views

CVE-2025-62143 WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through 1.163...

4.3CVSS6.5AI score0.00034EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/31 3:49 p.m.21 views

CVE-2025-62143 WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players video-playlist-and-gallery-plugin allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through = 1.163...

4.3CVSS0.00034EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 3:49 p.m.3 views

CVE-2025-62143

Technical details about CVE-2025-62143 are not provided in the supplied documents. The connected Wordfence report does not specify affected versions or remediation. Monitor for updates from vendors/security researchers for confirmed impact, exploitability, and fixes.

4.3CVSS5.9AI score0.00034EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/12/31 3:46 p.m.3 views

WordPress Post Video Players plugin <= 1.163 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Nabil Irawan in WordPress Plugin Post Video Players versions = 1.163...

4.3CVSS6.7AI score0.00034EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/12/31 1:19 p.m.2 views

WordPress Post Video Players plugin <= 1.163 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin Post Video Players versions = 1.163...

5.9CVSS5.9AI score0.00007EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.2 views

PT-2025-54367

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in nicashmu Post Video Players allows Retrieve Embedded Sensitive Data.This issue affects Post Video Players: from n/a through 1.163...

4.3CVSS6.8AI score0.00034EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.1 views

WordPress plugin Post Video Players 安全漏洞

Expo, etc. are products of Expo. expo is a product of WebSockets ws, etc. are products of WebSockets open source. ws is a Node.js WebSocket library. tanStack form, etc. are products of TanStack open source. form is a form state management program. A security vulnerability exists in the WordPress...

4.3CVSS6.2AI score0.00034EPSS
Exploits0References1
Fedora
Fedora
added 2025/12/04 12:53 a.m.3 views

[SECURITY] Fedora 43 Update: syncplay-1.7.4-6.fc43

Solution to synchronize video playback across multiple instances of mpv, VLC, MPC-HC and MPC-BE over the Internet. Syncplay synchronizes the position and play state of multiple media players so that the viewers can watch the same thing at the same time. This means that when one person...

6.9AI score
Exploits0
EUVD
EUVD
added 2025/11/13 6:31 p.m.1 views

EUVD-2025-175319

Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c 2025-06-02 contains a Server-Side Request Forgery SSRF vulnerability in the game export API. The players parameter is passed directly to an internal HTTP client without validation, allowing remote attackers to force the server to...

6.5CVSS6.6AI score0.00231EPSS
Exploits1References3
NVD
NVD
added 2025/11/13 4:15 p.m.1 views

CVE-2025-52186

Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c 2025-06-02 contains a Server-Side Request Forgery SSRF vulnerability in the game export API. The players parameter is passed directly to an internal HTTP client without validation, allowing remote attackers to force the server to...

6.5CVSS0.00231EPSS
Exploits1References2
OSV
OSV
added 2025/11/13 4:15 p.m.0 views

CVE-2025-52186

Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c 2025-06-02 contains a Server-Side Request Forgery SSRF vulnerability in the game export API. The players parameter is passed directly to an internal HTTP client without validation, allowing remote attackers to force the server to...

6.5CVSS5.9AI score
Exploits0References2
CVE
CVE
added 2025/11/13 12:0 a.m.5 views

CVE-2025-52186

Summary: CVE-2025-52186 affects Lichess Lila (before commit 11b4c0fb00f0ffd823246f839627005459c8f05c) with a Server-Side Request Forgery (SSRF) in the game export API. The players parameter is passed directly to an internal HTTP client without validation, allowing a remote attacker to compel the ...

6.5CVSS6.7AI score0.00231EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/13 12:0 a.m.1 views

CVE-2025-52186

Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c 2025-06-02 contains a Server-Side Request Forgery SSRF vulnerability in the game export API. The players parameter is passed directly to an internal HTTP client without validation, allowing remote attackers to force the server to...

6.7AI score0.00231EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/11/13 12:0 a.m.3 views

CVE-2025-52186

Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c 2025-06-02 contains a Server-Side Request Forgery SSRF vulnerability in the game export API. The players parameter is passed directly to an internal HTTP client without validation, allowing remote attackers to force the server to...

0.00231EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2004-1520

Malware in sbrugna...

7.5CVSS6.4AI score0.00489EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2006-6592

Malware in sbrugna...

5CVSS6.2AI score0.01271EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2006-3619

Malware in sbrugna...

4.3CVSS6.4AI score0.00315EPSS
Exploits1References4
Rows per page
Query Builder