Vulnerabilities (CVE)

Filtered by vendor Nullsoft Subscribe
Filtered by product Winamp
Total 62 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0820 1 Nullsoft 1 Winamp 2025-04-03 4.6 MEDIUM N/A
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
CVE-2002-2412 1 Nullsoft 1 Winamp 2025-04-03 2.1 LOW N/A
Winamp 2.80 stores authentication credentials in plaintext in the (1) [HTTP-AUTH] and (2) [winamp] sections in winamp.ini, which allows local users to gain access to other accounts.