CVE-2018-19357

XMPlay 3.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted http:// URL in a .m3u file.

• CWE-787

• https://exploit-db.com/exploits/46020/Exploit, Third Party Advisory, VDB Entry
• https://exploit-db.com/exploits/46020/Exploit, Third Party Advisory, VDB Entry

Published

Dec 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1935IBM Connections 5.0, 5.5, and 6.0 could allow an authenticat…4.3
• CVE-2018-19350In SeaCMS v6.6.4, there is stored XSS via the member.php?act…
• CVE-2018-19351Jupyter Notebook before 5.7.1 allows XSS via an untrusted no…
• CVE-2018-19352Jupyter Notebook before 5.7.2 allows XSS via a crafted direc…
• CVE-2018-19353The ansilove_ansi function in loaders/ansi.c in libansilove …
• CVE-2018-19355modules/orderfiles/ajax/upload.php in the Customer Files Upl…9.8
• CVE-2018-19358GNOME Keyring through 3.28.2 allows local users to retrieve …
• CVE-2018-19359GitLab Community and Enterprise Edition 8.9 and later and be…
• CVE-2018-1936IBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable…8.4
• CVE-2018-19360FasterXML jackson-databind 2.x before 2.9.8 might allow atta…
• CVE-2018-19361FasterXML jackson-databind 2.x before 2.9.8 might allow atta…
• CVE-2018-19362FasterXML jackson-databind 2.x before 2.9.8 might allow atta…