Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Pandora Clear all filters
TI-2023-01638 CVE-2023-1745 · GHSA-3g2p-q7w4-62h8

KMPlayer SHFOLDER.dll uncontrolled search path

Priority LOW 34

A vulnerability, which was classified as problematic, has been found in KMPlayer 4.2.2.73.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00369 Published 2023-03-30 No fix listed CWE-427
TI-2018-03759 CVE-2018-5200 · GHSA-6cv9-f688-pm67

KMPlayer Heap Overflow Vulnerability

Priority LOW 37

KMPlayer 4.2.2.15 and earlier have a Heap Based Buffer Overflow Vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01675 Published 2018-12-20 No fix listed CWE-119
TI-2017-02399 CVE-2017-3194 · GHSA-3j6h-ffr2-hw5m

Improper certificate validation in Pandora iOS App

Priority LOW 38

Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01282 Published 2017-12-15 Fixed in 8.3.2 CWE-295