pandora records

4 published records for vendor pandora.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2018-5200No exploit	KMPlayer Heap Overflow Vulnerabilitypandora · kmplayer · CWE-119 RCE Memory safety	High7.8	—	1.6%	Dec 20, 2018
32Monitor	CVE-2017-3194No exploit	Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attackpandora · pandora · CWE-295 Pre-auth Weak crypto	High8.1	—	1.2%	Dec 15, 2017
31Monitor	CVE-2023-1745No exploit	KMPlayer SHFOLDER.dll uncontrolled search pathpandora · kmplayer · CWE-427	High7.8	—	0.3%	Mar 30, 2023
22Monitor	CVE-2024-41200No exploit	A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file.pandora · kmplayer Denial of service	Medium5.5	—	0.1%	Aug 5, 2024

CVE-2018-5200
32Monitor
KMPlayer Heap Overflow Vulnerability
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Memory safety
pandora · kmplayerDec 20, 2018
CVE-2017-3194
32Monitor
Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attack
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
- Weak crypto
pandora · pandoraDec 15, 2017
CVE-2023-1745
31Monitor
KMPlayer SHFOLDER.dll uncontrolled search path
HighCVSS 7.8No exploitEPSS 0%
pandora · kmplayerMar 30, 2023
CVE-2024-41200
22Monitor
A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
pandora · kmplayerAug 5, 2024