İçeriğe atla
Noroxi

FolioVision kayıtları

foliovision üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%13,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2019-13573
    40Planlayın

    A SQL injection vulnerability exists in the FolioVision FV Flowplayer Video Player plugin before 7.3.19.727 for WordPress.

    KritikCVSS 9,8İstismar yokEPSS %4

    foliovision · fv flowplayer video player17 Tem 2019

  • CVE-2019-14801
    40Planlayın

    The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows email subscription SQL injection.

    KritikCVSS 9,8İstismar yokEPSS %2

    foliovision · fv flowplayer video player9 Ağu 2019

  • CVE-2024-6338
    35İzleyin

    FV Player <= 7.5.46.7212 - Authenticated (Subscriber+) SQL Injection via exclude Parameter

    YüksekCVSS 8,8İstismar yokEPSS %1

    foliovision · fv flowplayer video player19 Tem 2024

  • CVE-2023-25066
    35İzleyin

    WordPress FV Flowplayer Video Player Plugin <= 7.5.30.7212 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    foliovision · fv flowplayer video player14 Şub 2023

  • CVE-2022-25607
    28İzleyin

    WordPress FV Flowplayer Video Player plugin <= 7.5.15.727 - SQL Injection (SQLi) vulnerability

    YüksekCVSS 7,2İstismar yokEPSS %1

    foliovision · fv flowplayer video player18 Mar 2022

  • CVE-2021-39350
    25İzleyin

    FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    foliovision · fv flowplayer video player6 Eki 2021

  • CVE-2019-14799
    25İzleyin

    The FV Flowplayer Video Player plugin before 7.3.14.727 for WordPress allows email subscription XSS.

    OrtaCVSS 6,1İstismar yokEPSS %2

    foliovision · fv flowplayer video player9 Ağu 2019

  • CVE-2018-0642
    24İzleyin

    Cross-site scripting vulnerability in FV Flowplayer Video Player 6.1.2 to 6.6.4 allows remote attackers to inject arbitrary web script or HT

    OrtaCVSS 6,1İstismar yokEPSS %1

    foliovision · fv flowplayer video player7 Eyl 2018

  • CVE-2023-4520
    24İzleyin

    FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update

    OrtaCVSS 6,1İstismar yokEPSS %1

    foliovision · fv flowplayer video player24 Ağu 2023

  • CVE-2023-30499
    24İzleyin

    WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    foliovision · fv flowplayer video player18 Ağu 2023

  • CVE-2019-14800
    21İzleyin

    The FV Flowplayer Video Player plugin before 7.3.15.727 for WordPress allows guests to obtain the email subscription list in CSV format via

    OrtaCVSS 5,3İstismar yokEPSS %2

    foliovision · fv flowplayer video player15 Ağu 2019

  • CVE-2020-35748
    21İzleyin

    Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress a

    OrtaCVSS 5,4İstismar yokEPSS %1

    foliovision · fv flowplayer video player15 Oca 2021

  • CVE-2022-25613
    21İzleyin

    WordPress FV Flowplayer Video Player plugin <= 7.5.18.727 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %1

    foliovision · fv flowplayer video player4 Nis 2022

  • CVE-2014-1232
    18İzleyin

    Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arb

    OrtaCVSS 4,3İstismar yokEPSS %2

    wordpress · wordpress8 Oca 2014

  • CVE-2011-4568
    18İzleyin

    Cross-site scripting (XSS) vulnerability in view/frontend-head.php in the Flowplayer plugin before 1.2.12 for WordPress allows remote attack

    OrtaCVSS 4,3İstismar yokEPSS %2

    wordpress · wordpress29 Kas 2011