CVE-2022-4882
Published Jan 9, 2023A vulnerability was found in kaltura mwEmbed up to 2.91. It has been rated as problematic. Affected by this issue is some unknown functionality of the file modules/KalturaSupport/…
Vendor archive
kaltura CVEs
Beta · best-effort7 CVEs tagged to vendor kaltura — 1 Critical, 1 High, 3 Medium, 2 Low, 0 Unrated.
CVE-2022-4876
Published Jan 4, 2023A vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The…
CVE-2017-14143
Published Sep 19, 2017The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protectio…
CVE-2017-14142
Published Sep 19, 2017Multiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) partnerId or (2) playerVersi…
CVE-2017-14141
Published Sep 19, 2017The wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary…
CVE-2017-6392
Published Mar 2, 2017An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "server-Lynx-12.11.0/admin_cons…
CVE-2017-6391
Published Mar 2, 2017An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "admin_console/web/tools/Simple…
Showing 1-7 of 7 CVEsPage 1 of 1