605 matches found
EUVD-2025-201173
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
CVE-2025-29845
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
CVE-2025-29845
CVE-2025-29845 concerns a vulnerability in VideoPlayer2 subtitle CGI that allows remote authenticated users to read .srt subtitle files. The issue is observed across multiple records (NVD, Red Hat, CNNVD, ENISA EUVD, etc.) and is associated with Synology products (VideoPlayer2 component and SRM c...
CVE-2025-29845
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
Synology Router Manager 路径遍历漏洞
Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A path traversal vulnerability exists in Synology Router Manager SRM, which originates from a remote authenticated user being able to read .srt files...
EUVD-2025-198433
The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdprtitletag' and 'mpdprsubtitletag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on...
CVE-2025-12964 Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget
The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdprtitletag' and 'mpdprsubtitletag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on...
PT-2025-47715
The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdpr title tag' and 'mpdpr subtitle tag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on...
The vulnerability of the Gstreamer multimedia framework, related to the assignment of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of the Gstreamer multimedia framework is related to the assignment of a null pointer in the subtitle parser TMPlayer. Exploiting this vulnerability can allow an attacker to cause a service failure...
JLSEC-2025-103 A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU...
A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handleopenbrace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
JLSEC-2025-102 In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU...
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
EUVD-2019-19085
Malware in sbrugna...
EUVD-2015-7310
Malware in sbrugna...
EUVD-2011-5249
Malware in sbrugna...
EUVD-2012-6461
Malware in sbrugna...
EUVD-2019-18517
Malware in sbrugna...
EUVD-2019-19082
Malware in sbrugna...
EUVD-2019-19083
Malware in sbrugna...