Show filters
2,221 Total Results
Displaying 101-110 of 2,221
Sort by:
Attacker Value
Unknown

CVE-2023-51689

Disclosure Date: February 01, 2024 (last updated February 06, 2024)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10.
Attacker Value
Unknown

CVE-2024-1061

Disclosure Date: January 30, 2024 (last updated February 06, 2024)
The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the  'get_view' function.
Attacker Value
Unknown

CVE-2023-52202

Disclosure Date: January 08, 2024 (last updated January 12, 2024)
Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Folder Feedburner Playlist Free.This issue affects HTML5 MP3 Player with Folder Feedburner Playlist Free: from n/a through 2.8.0.
Attacker Value
Unknown

CVE-2023-52205

Disclosure Date: January 08, 2024 (last updated January 12, 2024)
Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 SoundCloud Player with Playlist Free.This issue affects HTML5 SoundCloud Player with Playlist Free: from n/a through 2.8.0.
Attacker Value
Unknown

CVE-2023-52207

Disclosure Date: January 08, 2024 (last updated January 12, 2024)
Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0.
Attacker Value
Unknown

CVE-2023-6485

Disclosure Date: January 01, 2024 (last updated January 09, 2024)
The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against high privilege users like admins
Attacker Value
Unknown

CVE-2023-49178

Disclosure Date: December 15, 2023 (last updated December 21, 2023)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mr. Hdwplayer HDW Player Plugin (Video Player & Video Gallery) allows Reflected XSS.This issue affects HDW Player Plugin (Video Player & Video Gallery): from n/a through 5.0.
Attacker Value
Unknown

CVE-2023-48861

Disclosure Date: December 07, 2023 (last updated December 12, 2023)
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll.
Attacker Value
Unknown

CVE-2023-47453

Disclosure Date: November 30, 2023 (last updated December 07, 2023)
An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in the current working directory.
Attacker Value
Unknown

CVE-2023-48320

Disclosure Date: November 30, 2023 (last updated December 06, 2023)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22.