Show filters
2,221 Total Results
Displaying 111-120 of 2,221
Sort by:
Attacker Value
Unknown
CVE-2023-46814
Disclosure Date: November 22, 2023 (last updated November 30, 2023)
A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM.
0
Attacker Value
Unknown
CVE-2023-47360
Disclosure Date: November 07, 2023 (last updated November 14, 2023)
Videolan VLC prior to version 3.0.20 contains an Integer underflow that leads to an incorrect packet length.
0
Attacker Value
Unknown
CVE-2023-47359
Disclosure Date: November 07, 2023 (last updated November 14, 2023)
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.
0
Attacker Value
Unknown
CVE-2023-45632
Disclosure Date: October 18, 2023 (last updated October 25, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado SpiderVPlayer plugin <= 1.5.22 versions.
0
Attacker Value
Unknown
CVE-2023-45049
Disclosure Date: October 18, 2023 (last updated October 26, 2023)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Ciprian Popescu YouTube Playlist Player plugin <= 4.6.7 versions.
0
Attacker Value
Unknown
CVE-2023-25989
Disclosure Date: October 03, 2023 (last updated October 17, 2023)
Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple Flickr Widget, Meks Easy Ads Widget, Meks Smart Social Widget plugins leading to dismiss or the popup.
0
Attacker Value
Unknown
CVE-2023-38516
Disclosure Date: September 03, 2023 (last updated October 08, 2023)
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Audio Player with Playlist Ultimate plugin <= 1.2.2 versions.
0
Attacker Value
Unknown
CVE-2023-4520
Disclosure Date: August 25, 2023 (last updated October 08, 2023)
The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_fv_player_user_video’ parameter saved via the 'save' function hooked via init, and the plugin is also vulnerable to Arbitrary Usermeta Update via the 'save' function in versions up to, and including, 7.5.37.7212 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page, and makes it possible to update the user metas arbitrarily, but the meta value can only be a string.
0
Attacker Value
Unknown
CVE-2023-30499
Disclosure Date: August 18, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FolioVision FV Flowplayer Video Player plugin <= 7.5.32.7212 versions.
0
Attacker Value
Unknown
CVE-2023-37976
Disclosure Date: July 27, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Radio Forge Muses Player with Skins plugin <= 2.5 versions.
0
