Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 05:10:14 +0000 certa-2010-avi-586 — De multiples vulnérabilités dans RealPlayer permettent à une personne malveillante distante d'exécuter du code arbitrai… https://cve.radiocsirt.org/vuln/certa-2010-avi-586 certa-2010-avi-586 https://cve.radiocsirt.org/vuln/certa-2010-avi-586 EUVD-2026-120626 https://cve.radiocsirt.org/vuln/euvd-2026-120626 EUVD-2026-120626 https://cve.radiocsirt.org/vuln/euvd-2026-120626 fkie_cve-2010-4388 https://cve.radiocsirt.org/vuln/fkie_cve-2010-4388 <p>The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.</p> <p>The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2010-4388 GHSA-qw2f-744w-3w38 https://cve.radiocsirt.org/vuln/ghsa-qw2f-744w-3w38 <p>The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.</p> <p>The (1) Upsell.htm, (2) Main.html, and (3) Custsupport.html components in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, and RealPlayer Enterprise 2.1.2 and 2.1.3 allow remote attackers to inject code into the RealOneActiveXObject process, and consequently bypass intended Local Machine Zone restrictions and load arbitrary ActiveX controls, via unspecified vectors.</p> https://cve.radiocsirt.org/vuln/ghsa-qw2f-744w-3w38 gsd-2010-4388 https://cve.radiocsirt.org/vuln/gsd-2010-4388 gsd-2010-4388 https://cve.radiocsirt.org/vuln/gsd-2010-4388