Lucene search
K

6 matches found

NVD
NVD
added 2026/03/23 3:16 p.m.0 views

CVE-2026-33482

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the sanitizeFFmpegCommand function in plugin/API/standAlone/functions.php is designed to prevent OS command injection in ffmpeg commands by stripping dangerous shell metacharacters &&, ;, |, , . However, it fails ...

8.1CVSS0.00106EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/03/23 2:10 p.m.1 views

CVE-2026-33482 AVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand()

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the sanitizeFFmpegCommand function in plugin/API/standAlone/functions.php is designed to prevent OS command injection in ffmpeg commands by stripping dangerous shell metacharacters &&, ;, |, , . However, it fails ...

8.1CVSS6.1AI score0.00106EPSS
Exploits1References2
OSV
OSV
added 2026/03/23 2:10 p.m.1 views

CVE-2026-33482 AVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand()

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the sanitizeFFmpegCommand function in plugin/API/standAlone/functions.php is designed to prevent OS command injection in ffmpeg commands by stripping dangerous shell metacharacters &&, ;, |, , . However, it fails ...

8.1CVSS6.1AI score0.00106EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2026/03/20 8:46 p.m.4 views

AVideo has an OS Command Injection via $() Shell Substitution Bypass in sanitizeFFmpegCommand()

Summary The sanitizeFFmpegCommand function in plugin/API/standAlone/functions.php is designed to prevent OS command injection in ffmpeg commands by stripping dangerous shell metacharacters &&, ;, |, , . However, it fails to strip $ bash command substitution syntax. Since the sanitized command is...

8.1CVSS6.1AI score0.00106EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2013/11/19 12:0 a.m.22 views

SuSE Update for NRPE openSUSE-SU-2013:0624-1 (NRPE)

Check for the Version of NRPE OpenVAS Vulnerability Test $Id: gbsuse201306241.nasl 8494 2018-01-23 06:57:55Z teissa $ SuSE Update for NRPE openSUSE-SU-2013:0624-1 NRPE Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is fre...

7.5CVSS6.3AI score0.76437EPSS
Exploits9References1
OpenVAS
OpenVAS
added 2013/11/19 12:0 a.m.29 views

SuSE Update for NRPE openSUSE-SU-2013:0621-1 (NRPE)

Check for the Version of NRPE OpenVAS Vulnerability Test $Id: gbsuse201306211.nasl 8045 2017-12-08 08:39:37Z santu $ SuSE Update for NRPE openSUSE-SU-2013:0621-1 NRPE Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

7.5CVSS6.3AI score0.76437EPSS
Exploits9References1
Rows per page
Query Builder