wwbn Vulnerability Advisory Catalog

Total 193 security vulnerabilities recorded for wwbn software and firmware.

← Back to All Vendors
Component: avideo

A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A series o...

📅 2025-07-24
CVSS 8.8 Dossier →
Component: avideo

WWBN AVideo 12.4 is vulnerable to Cross Site Scripting (XSS)....

📅 2024-05-14
CVSS 5.4 Dossier →
CVE-2024-31819 CRITICAL
Component: avideo

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the submitIndex.p...

📅 2024-04-10
CVSS 9.8 Dossier →
Component: avideo

A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed...

📅 2024-01-10
CVSS 5.3 Dossier →
Component: avideo

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 1...

📅 2024-01-10
CVSS 6.5 Dossier →
Component: avideo

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 1...

📅 2024-01-10
CVSS 6.5 Dossier →
Component: avideo

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 1...

📅 2024-01-10
CVSS 6.5 Dossier →
Component: avideo

A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A special...

📅 2024-01-10
CVSS 7.3 Dossier →
Component: avideo

An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted H...

📅 2024-01-10
CVSS 7.5 Dossier →
Component: avideo

A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. A...

📅 2024-01-10
CVSS 4.3 Dossier →
CVE-2023-49599 CRITICAL
Component: avideo

An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted ser...

📅 2024-01-10
CVSS 9.8 Dossier →
Component: avideo

An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVideo dev master commit 15fed957...

📅 2024-01-10
CVSS 8.8 Dossier →
Component: avideo

A cross-site scripting (xss) vulnerability exists in the navbarMenuAndLogo.php user name functionality of WWBN AVideo dev master commit 15fed957fb. A ...

📅 2024-01-10
CVSS 8.5 Dossier →
CVE-2023-48728 CRITICAL
Component: avideo

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3...

📅 2024-01-10
CVSS 9.6 Dossier →
CVE-2023-47862 CRITICAL
Component: avideo

A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially craft...

📅 2024-01-10
CVSS 9.8 Dossier →
CVE-2023-47861 CRITICAL
Component: avideo

A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb....

📅 2024-01-10
CVSS 9.0 Dossier →
Component: avideo

An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15...

📅 2024-01-10
CVSS 6.5 Dossier →
Component: avideo

WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.js...

📅 2023-05-12
CVSS 8.8 Dossier →
Component: avideo

WWBN AVideo is an open source video platform. In AVideo prior to version 12.4, a normal user can make a Meeting Schedule where the user can invite ano...

📅 2023-05-08
CVSS 8.0 Dossier →
Component: avideo

AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/...

📅 2023-04-28
CVSS 8.8 Dossier →
Component: avideo

Cross Site Scripting (XSS) vulnerability in World Wide Broadcast Network AVideo before 12.4, allows attackers to gain sensitive information via the su...

📅 2023-04-25
CVSS 6.1 Dossier →
CVE-2023-25313 CRITICAL
Component: avideo

OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link f...

📅 2023-04-25
CVSS 9.8 Dossier →
Component: avideo

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP reque...

📅 2022-08-22
CVSS 8.8 Dossier →
Component: avideo

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP reque...

📅 2022-08-22
CVSS 8.8 Dossier →
Page 7 of 9 (193 Total Records)