Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Cdnetworks Subscribe
Filtered by product Aquanplayer
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7858 2 Cdnetworks, Microsoft 2 Aquanplayer, Windows 2021-04-29 5.0 MEDIUM 8.6 HIGH
There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" sequences(../../) to view host file on the system. This vulnerability can cause information leakage.