Lucene search
K

124 matches found

NVD
NVD
added 2026/05/19 12:16 p.m.7 views

CVE-2026-45442

Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: from n/a through 4.1.3...

4.3CVSS0.00028EPSS
Exploits0References1
CVE
CVE
added 2026/05/19 10:54 a.m.12 views

CVE-2026-45442

CVE-2026-45442 concerns WordPress plugin Presto Player (Brainstorm Force) versions

4.3CVSS5.8AI score0.00028EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/05/19 10:54 a.m.3 views

CVE-2026-45442 WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: from n/a through 4.1.3...

4.3CVSS5.8AI score0.00028EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/19 10:54 a.m.29 views

CVE-2026-45442 WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: from n/a through 4.1.3...

4.3CVSS0.00028EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/19 10:54 a.m.5 views

CVE-2026-45442

Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: from n/a through 4.1.3...

4.3CVSS5.8AI score0.00028EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/19 10:54 a.m.6 views

EUVD-2026-30885

Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: from n/a through 4.1.3...

4.3CVSS5.8AI score0.00028EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/19 10:51 a.m.5 views

WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Bao - BlueRock in WordPress Plugin Presto Player versions = 4.1.3...

4.3CVSS5.8AI score0.00028EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2026/05/19 12:0 a.m.5 views

WordPress plugin Presto Player 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS5.8AI score0.00028EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/19 12:0 a.m.8 views

PT-2026-41876

Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Presto Player: from n/a through 4.1.3...

4.3CVSS5.8AI score0.00028EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/02/25 4:6 a.m.2 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

7.3CVSS5.9AI score0.00006EPSS
Exploits0References1
OSV
OSV
added 2026/02/24 3:16 a.m.1 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files during installation by placing a malicious DLL in advance in the same directory as the installer...

7.1CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2026/02/24 3:16 a.m.4 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

7.3CVSS0.00006EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/24 2:31 a.m.16 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

6.7CVSS0.00006EPSS
Exploits0References1
CVE
CVE
added 2026/02/24 2:31 a.m.7 views

CVE-2026-3091

The CVE-2026-3091 entry covers an Uncontrolled Search Path Element vulnerability in Synology Presto Client prior to 2.1.3-0672. The issue allows local users to read or write arbitrary files and can cause denial of service during installation by placing a malicious DLL in the same directory as the...

7.3CVSS5.9AI score0.00006EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/24 2:31 a.m.1 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

6.7CVSS5.9AI score0.00006EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/24 2:31 a.m.2 views

EUVD-2026-7405

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files during installation by placing a malicious DLL in advance in the same directory as the installer...

6.7CVSS5.6AI score0.00006EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/24 2:31 a.m.3 views

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing a malicious DLL in advance in the same directory as the installer...

7.1CVSS5.9AI score0.00006EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.4 views

PT-2026-21657

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files during installation by placing a malicious DLL in advance in the same directory as the installer...

6.7CVSS5.6AI score0.00006EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.3 views

Synology Presto Client 代码问题漏洞

Synology Presto Client is a high-speed transfer tool developed by the Chinese company Synology. Versions of Synology Presto Client prior to 2.1.3-0672 contained a code vulnerability. This vulnerability stemmed from uncontrolled search path elements during the installation process, which could all...

7.1CVSS6AI score0.00006EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/30 8:57 a.m.9 views

WordPress The Ultimate Video Player For WordPress plugin < 2.2.3 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Presto Player versions 2.2.3...

4.7CVSS5.9AI score0.00157EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder