Vendors / Pandora Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Pandora records in CISA KEV No Pandora vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.
CVSS 3.0 HIGH 8.1· Network · No auth · No interaction · EPSS 0.01282 · Published 2017-12-15 · Fixed in 8.3.2 CWE-295
Priority LOW 37
KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01675 · Published 2018-12-20 · No fix listed CWE-119
Priority LOW 34
A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00369 · Published 2023-03-30 · No fix listed CWE-427
Priority LOW 24
A segmentation fault in KMPlayer v4.2.2.65 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file.
CVSS 3.1 MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00158 · Published 2024-08-05 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High3 Medium1 Low0 No CVSS0