631 matches found
PT-2025-52354
Streama versions 1.10.0 through 1.10.5 and prior to commit b7c8767 contain a combination of path traversal and server-side request forgery SSRF vulnerabilities in that allow an authenticated attacker to write arbitrary files to the server filesystem. The issue exists in the subtitle download...
Streama 代码问题漏洞
Streama is a self-hosted streaming media server. A code issue vulnerability exists in Streama versions 1.10.0 through 1.10.5 and prior to b7c8767, which stems from a path traversal and server-side request forgery in the subtitle download feature that could lead to remote code execution...
CVE-2025-29845
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
CVE-2025-29845
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
CVE-2025-29845
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
CVE-2025-29845
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
CVE-2025-29845
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
CVE-2025-29845
CVE-2025-29845 concerns a vulnerability in VideoPlayer2 subtitle CGI that allows remote authenticated users to read .srt subtitle files. The issue is observed across multiple records (NVD, Red Hat, CNNVD, ENISA EUVD, etc.) and is associated with Synology products (VideoPlayer2 component and SRM c...
EUVD-2025-201173
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files...
Synology Router Manager 路径遍历漏洞
Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A path traversal vulnerability exists in Synology Router Manager SRM, which originates from a remote authenticated user being able to read .srt files...
EUVD-2025-198433
The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdprtitletag' and 'mpdprsubtitletag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on...
CVE-2025-12964 Magical Products Display <= 1.1.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via MPD Pricing Table Widget
The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdprtitletag' and 'mpdprsubtitletag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on...
PT-2025-47715
The Magical Products Display plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mpdpr title tag' and 'mpdpr subtitle tag' parameters in the MPD Pricing Table widget in all versions up to, and including, 1.1.29 due to insufficient input sanitization and output escaping on...
The vulnerability of the Gstreamer multimedia framework, related to the assignment of the null pointer, allows a hacker to trigger a service failure.
The vulnerability of the Gstreamer multimedia framework is related to the assignment of a null pointer in the subtitle parser TMPlayer. Exploiting this vulnerability can allow an attacker to cause a service failure...
JLSEC-2025-103 A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU...
A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handleopenbrace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
JLSEC-2025-102 In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU...
In FFmpeg 3.2 and 4.1, a denial of service in the subtitle decoder allows attackers to hog the CPU via a crafted video file in Matroska format, because ffhtmlmarkuptoass in libavcodec/htmlsubtitles.c has a complex format argument to sscanf...
EUVD-2015-7310
Malware in sbrugna...
EUVD-2010-2449
Malware in sbrugna...