Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 01:12:14 +0000 certa-2010-avi-507 — De multiples vulnérabilités ont été corrigées dans RealPlayer. Elles permettent à un utilisateur malveillant distant d'… https://cve.radiocsirt.org/vuln/certa-2010-avi-507 certa-2010-avi-507 https://cve.radiocsirt.org/vuln/certa-2010-avi-507 EUVD-2026-120169 https://cve.radiocsirt.org/vuln/euvd-2026-120169 EUVD-2026-120169 https://cve.radiocsirt.org/vuln/euvd-2026-120169 fkie_cve-2010-3749 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3749 <p>The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a &#34; (double quote) in an argument to the RecordClip method, aka &#34;parameter injection.&#34;</p> <p>The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a &#34; (double quote) in an argument to the RecordClip method, aka &#34;parameter injection.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-3749 GHSA-6p5r-m5h8-g9rj https://cve.radiocsirt.org/vuln/ghsa-6p5r-m5h8-g9rj <p>The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a &#34; (double quote) in an argument to the RecordClip method, aka &#34;parameter injection.&#34;</p> <p>The browser-plugin implementation in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1 allows remote attackers to arguments to the RecordClip method, which allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via a &#34; (double quote) in an argument to the RecordClip method, aka &#34;parameter injection.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-6p5r-m5h8-g9rj gsd-2010-3749 https://cve.radiocsirt.org/vuln/gsd-2010-3749 gsd-2010-3749 https://cve.radiocsirt.org/vuln/gsd-2010-3749