Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

17097 matches found

Prion
Prion•added 2022/08/22 7:15 p.m.•23 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

6.5CVSS8.9AI score0.01144EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•19 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.04226EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•30 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

6CVSS8.5AI score0.0302EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•21 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

6.5CVSS8.9AI score0.01825EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•25 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.04448EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•21 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this...

5.8CVSS6AI score0.83583EPSS
SaveExploits1References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•22 views

Authentication flaw

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP reque...

3.6CVSS4.9AI score0.00901EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•22 views

Sql injection

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

6.5CVSS8.9AI score0.01073EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•24 views

Command injection

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability...

6.5CVSS9AI score0.74491EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2022/08/22 7:15 p.m.•23 views

Cross site scripting

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

5.8CVSS6AI score0.03871EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment•added 2022/08/22 6:30 p.m.•10 views

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

8.3CVSS9AI score0.01073EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:30 p.m.•23 views

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules...

8.3CVSS7.8AI score
SaveExploits0References4
Cvelist
Cvelist•added 2022/08/22 6:29 p.m.•30 views

CVE-2022-33149

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the CloneSite plugi...

8.3CVSS9.2AI score0.01825EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2022/08/22 6:29 p.m.•7 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

8.3CVSS8.7AI score0.01825EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2022/08/22 6:29 p.m.•31 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

8.3CVSS9.2AI score0.01825EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:29 p.m.•26 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder...

8.3CVSS7.8AI score
SaveExploits0References4
Vulnrichment
Vulnrichment•added 2022/08/22 6:27 p.m.•7 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6AI score0.03871EPSS
SaveExploits0References2
OSV
OSV•added 2022/08/22 6:27 p.m.•28 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6.2AI score
SaveExploits0References4
Cvelist
Cvelist•added 2022/08/22 6:27 p.m.•54 views

CVE-2022-32772

A cross-site scripting xss vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger...

9.6CVSS6.2AI score0.03871EPSS
SaveExploits0References2
CVE
CVE•added 2022/08/22 6:27 p.m.•110 views

CVE-2022-32772

CVE-2022-32772 affects WWBN AVideo 11.6 and the dev master commit 3f7c0364. The vulnerability is a footer alerts XSS in the msg parameter, where insufficient sanitization allows crafted input to inject JavaScript. TALOS confirms multiple XSS variants via footer.php without proper sanitization, in...

9.6CVSS6.1AI score0.03871EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder