Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

17144 matches found

Prion
Prion•added 2022/08/22 7:15 p.m.•26 views

Cross site scripting

A reflected cross-site scripting xss vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP...

6.8CVSS8.6AI score0.03898EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•23 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

6.5CVSS8.9AI score0.01171EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•32 views

Command injection

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

6.5CVSS9AI score0.244EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•26 views

Information disclosure

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability...

4CVSS6.2AI score0.02794EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•28 views

Authentication flaw

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP reque...

4.6CVSS5.3AI score0.00796EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•29 views

Information disclosure

An information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability...

4CVSS6.2AI score0.02661EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•22 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

6.5CVSS8.9AI score0.01868EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•26 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.04448EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•30 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

6CVSS8.5AI score0.03092EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•22 views

Authentication flaw

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP reque...

3.6CVSS4.9AI score0.00923EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•21 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this...

5.8CVSS6AI score0.83927EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•20 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.04226EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•25 views

Command injection

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

6.5CVSS9AI score0.74979EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•23 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.03963EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•22 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

6.5CVSS8.9AI score0.01099EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2022/08/22 6:30 p.m.•10 views

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

8.3CVSS9AI score0.01099EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:30 p.m.•23 views

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

8.3CVSS7.8AI score
SaveExploits0References4
Cvelist
Cvelist•added 2022/08/22 6:29 p.m.•31 views

CVE-2022-33149

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the CloneSite plugi...

8.3CVSS9.2AI score0.01868EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2022/08/22 6:29 p.m.•32 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

8.3CVSS9.2AI score0.01868EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2022/08/22 6:29 p.m.•7 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

8.3CVSS8.7AI score0.01868EPSS
SaveExploits0References2
Rows per page
Query Builder