Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

16872 matches found

Prion
Prion•added 2022/08/22 7:15 p.m.•21 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

6.5CVSS8.9AI score0.00992EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•22 views

Information disclosure

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability...

4CVSS6.2AI score0.02496EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•20 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this...

5.8CVSS6AI score0.83583EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•20 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

6.5CVSS8.9AI score0.01668EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•20 views

Authentication flaw

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP reque...

3.6CVSS4.9AI score0.00799EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•24 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.03494EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•18 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.03318EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•28 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

6CVSS8.5AI score0.02487EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•20 views

Command injection

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

6.5CVSS9AI score0.74491EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•22 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.0309EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•20 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

6.5CVSS8.9AI score0.00931EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2022/08/22 6:30 p.m.•8 views

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

8.3CVSS9AI score0.00931EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:30 p.m.•20 views

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

8.3CVSS7.8AI score
SaveExploits0References4
Cvelist
Cvelist•added 2022/08/22 6:29 p.m.•27 views

CVE-2022-33149

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the CloneSite plugi...

8.3CVSS9.2AI score0.01668EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2022/08/22 6:29 p.m.•29 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

8.3CVSS9.2AI score0.01668EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2022/08/22 6:29 p.m.•7 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

8.3CVSS8.7AI score0.01668EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:29 p.m.•25 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

8.3CVSS7.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2022/08/22 6:27 p.m.•7 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6AI score0.0309EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:27 p.m.•27 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist•added 2022/08/22 6:27 p.m.•52 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6.2AI score0.0309EPSS
SaveExploits0References2
Rows per page
Query Builder