Export limit exceeded: 26203 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2014-4030

Cross-site request forgery (CSRF) vulnerability in the JW Player plugin before 2.1.4 for WordPress allows remote attackers to hijack the authentication of administrators for requests that remove players via a delete action to wp-admin/admin.php.

CVSS 2.0 · 6.8 Medium EPSS 2.9% KEV · Not listed
Vendors
Longtailvideo
Products
Jw Player For Flash \& Html5 Video Plugin
CVE-2012-2904

player.swf in LongTail JW Player 5.9 allows remote attackers to conduct cross-site scripting (XSS) attacks to inject arbitrary web script or HTML via multiple "javascript:" sequences in the debug parameter.

CVSS 2.0 · 4.3 Medium EPSS 4.4% KEV · Not listed
Vendors
Longtailvideo
Products
Jw Player
CVE-2012-3351

Multiple cross-site scripting (XSS) vulnerabilities in LongTail Video JW Player through 5.10.2295 allow remote attackers to inject arbitrary web script or HTML via the (1) link, (2) logo.link, or (3) aboutlink parameter, or a nested URI scheme name for (4) javascript, (5) asfunction, or (6) vbscript.

CVSS 3.1 · 6.1 Medium EPSS 2.6% KEV · Not listed
Vendors
Longtailvideo
Products
Jw Player