RHEL 9 : giflib (RHSA-2026:33501)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:33501 advisory. giflib is a library for reading and writing gif images. Security Fixes: giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension...

CVE-2026-33501

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint plugin/Permissions/View/Usersgroupspermissions/list.json.php lacks any authentication or authorization check, allowing unauthenticated users to retrieve the complete permission matrix mapping user...

CVE-2026-33501 AVideo has Unauthenticated Information Disclosure of User Group Permission Mappings via Permissions Plugin

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint plugin/Permissions/View/Usersgroupspermissions/list.json.php lacks any authentication or authorization check, allowing unauthenticated users to retrieve the complete permission matrix mapping user...

CVE-2026-33501

creationtimestamp| type| source ---|---|--- 2026-03-20 18:08:24+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-96qp-8cmq-jvq8 2026-03-22 00:26:06+00:00| published-proof-of-concept| https://t.me/realcodeb0ss/384 2026-03-23 16:16:51+00:00| seen|...