wwbn Vulnerability Advisory Catalog

Total 193 security vulnerabilities recorded for wwbn software and firmware.

← Back to All Vendors
Component: avideo

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP reque...

📅 2022-08-22
CVSS 8.8 Dossier →
Component: avideo

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP reque...

📅 2022-08-22
CVSS 8.8 Dossier →
Component: avideo

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and ...

📅 2022-08-22
CVSS 7.5 Dossier →
Component: avideo

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and ...

📅 2022-08-22
CVSS 7.5 Dossier →
Component: avideo

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-c...

📅 2022-08-22
CVSS 6.1 Dossier →
Component: avideo

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-c...

📅 2022-08-22
CVSS 6.1 Dossier →
Component: avideo

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-c...

📅 2022-08-22
CVSS 6.1 Dossier →
Component: avideo

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A sp...

📅 2022-08-22
CVSS 5.0 Dossier →
Component: avideo

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A sp...

📅 2022-08-22
CVSS 4.2 Dossier →
Component: avideo

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A sp...

📅 2022-08-22
CVSS 6.5 Dossier →
Component: avideo

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-c...

📅 2022-08-22
CVSS 8.8 Dossier →
Component: avideo

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' passwo...

📅 2022-08-22
CVSS 8.8 Dossier →
Component: avideo

A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafte...

📅 2022-08-22
CVSS 6.1 Dossier →
Component: avideo

A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HT...

📅 2022-08-22
CVSS 8.8 Dossier →
CVE-2022-30547 CRITICAL
Component: avideo

A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted...

📅 2022-08-22
CVSS 9.9 Dossier →
Component: avideo

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specia...

📅 2022-08-22
CVSS 8.8 Dossier →
Component: avideo

A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead...

📅 2022-08-22
CVSS 8.8 Dossier →
CVE-2022-28712 CRITICAL
Component: avideo

A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-cra...

📅 2022-08-22
CVSS 9.0 Dossier →
Component: avideo

An information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted ...

📅 2022-08-22
CVSS 6.5 Dossier →
CVE-2022-26842 CRITICAL
Component: avideo

A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c03...

📅 2022-08-22
CVSS 9.6 Dossier →
Component: avideo

Open redirect vulnerability in objects/login.json.php in WWBN AVideo through 11.6, allows attackers to arbitrarily redirect users from a crafted url t...

📅 2022-04-05
CVSS 6.1 Dossier →
Component: avideo

Cross Site Scripting (XSS) vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to v...

📅 2022-04-05
CVSS 6.1 Dossier →
Component: avideo

AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an...

📅 2021-02-01
CVSS 7.7 Dossier →
Component: avideo

There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an...

📅 2020-11-16
CVSS 7.5 Dossier →
Page 8 of 9 (193 Total Records)