Lucene search
+L

875 matches found

Cvelist
Cvelist
•added 2026/04/12 12:28 p.m.•42 views

CVE-2019-25689 HTML5 Video Player 1.2.5 Local Buffer Overflow Non-SEH

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigge...

8.6CVSS0.00206EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/12 12:00 a.m.•0 views

CVE-2019-25689: Out-of-bounds Write

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigge...

8.6CVSS6.9AI score0.00206EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/12 12:00 a.m.•27 views

PT-2026-32159

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigge...

8.6CVSS6.7AI score0.00206EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/04/12 12:00 a.m.•17 views

HTML5 Video Player 缓冲区错误漏洞

Html5Videoplayer is a web video playback component implemented using HTML5 technology by Html5Videoplayer Inc. Version 1.2.5 of HTML5 Video Player contains a buffer overflow vulnerability, which stems from insufficient input validation of the KEYCODE field. This vulnerability could lead to a loca...

8.6CVSS6.3AI score0.00206EPSS
SaveExploits1References3
NVD
NVD
•added 2026/04/06 8:16 p.m.•15 views

CVE-2026-35181

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the player skin configuration endpoint at admin/playerUpdate.json.php does not validate CSRF tokens. The plugins table is explicitly excluded from the ORM's domain-based security check via ignoreTableSecurityCheck, removing...

4.3CVSS0.00146EPSS
SaveExploits1References1
Snyk
Snyk
•added 2026/04/03 11:43 p.m.•6 views

Cross-site Request Forgery (CSRF)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the admin/playerUpdate.json.php process. An attacker can modify the video player appearance across the platform by tricking an...

5.3CVSS5.8AI score0.00146EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/04/01 5:00 a.m.•14 views

CVE-2026-30280

An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure...

5.3CVSS6.4AI score0.00174EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/31 9:31 p.m.•19 views

EUVD-2026-17593

An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure...

6.4AI score0.00174EPSS
SaveExploits1References4
NVD
NVD
•added 2026/03/31 8:16 p.m.•11 views

CVE-2026-30280

An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure...

5.3CVSS0.00174EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/31 12:00 a.m.•0 views

CVE-2026-30280: Unrestricted Upload of File with Dangerous Type

An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure...

5.3CVSS6.2AI score0.00174EPSS
SaveExploits1References3
CVE
CVE
•added 2026/03/31 12:00 a.m.•31 views

CVE-2026-30280

The RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos version 1.0.135 is affected by an arbitrary file overwrite vulnerability. This flaw exists during the file import process , where an attacker can overwrite critical internal files. The practical consequences of this vulnerability...

6.4AI score0.00174EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/31 12:00 a.m.•11 views

PT-2026-29329

Name of the Vulnerable Software and Affected Versions RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos version 1.0.135 Description An arbitrary file overwrite issue exists during the file import process. This allows attackers to overwrite critical internal files, which can result i...

5.3CVSS6.4AI score0.00174EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2026/03/31 12:00 a.m.•8 views

CVE-2026-30280

An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure...

6.4AI score0.00174EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/03/31 12:00 a.m.•42 views

CVE-2026-30280

An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure...

0.00174EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/03/31 12:00 a.m.•16 views

Rareprob Video player 安全漏洞

Rareprob Video Player is a mobile video player application developed by the Indian company Rareprob. It supports playback of videos in multiple formats and local media management. Version 1.0.135 of Rareprob Video Player contains a security vulnerability. This vulnerability stems from an issue...

5.3CVSS6.3AI score0.00174EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/03/26 2:56 p.m.•13 views

CVE-2024-32537

Cross-Site request forgery CSRF vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This issue affects Flash Video Player: from n/a through 5.0.4...

7.1CVSS5.8AI score0.00117EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/20 12:31 p.m.•12 views

EUVD-2024-30339

Cross-Site request forgery CSRF vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This issue affects Flash Video Player: from n/a through 5.0.4...

7.1CVSS5.8AI score0.00117EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/20 10:16 a.m.•13 views

CVE-2024-32537

Cross-Site request forgery CSRF vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This issue affects Flash Video Player: from n/a through 5.0.4...

7.1CVSS0.00117EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/20 9:09 a.m.•7 views

CVE-2024-32537 WordPress Flash Video Player plugin <= 5.0.4 - CSRF to XSS vulnerability

Cross-Site request forgery CSRF vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This issue affects Flash Video Player: from n/a through 5.0.4...

7.1CVSS5.8AI score0.00117EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/03/20 9:09 a.m.•6 views

CVE-2024-32537

Cross-Site request forgery CSRF vulnerability in joshuae1974 Flash Video Player allows Cross Site Request Forgery.This issue affects Flash Video Player: from n/a through 5.0.4...

7.1CVSS5.8AI score0.00117EPSS
SaveExploits0References2
Rows per page
Query Builder