CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/22 9:52 p.m.•8 views

CVE-2022-27462

Cross Site Scripting XSS vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php...

6.1CVSS5.9AI score0.00612EPSS

SaveExploits0References1

NVD•added 2022/04/05 4:15 p.m.•27 views

CVE-2022-27462

Cross Site Scripting XSS vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php...

6.1CVSS0.00612EPSS

SaveExploits0References2

Cvelist•added 2022/04/05 3:37 p.m.•37 views

CVE-2022-27462

Cross Site Scripting XSS vulnerability in objects/function.php in function getDeviceID in WWBN AVideo through 11.6, via the yptDevice parameter to view/include/head.php...

6.1AI score0.00612EPSS

SaveExploits0References2

CVE•added 2022/04/05 3:37 p.m.•90 views

CVE-2022-27462

WWBN AVideo (through 11.6) is affected by CVE-2022-27462, a Cross Site Scripting (XSS) in objects/function.php:getDeviceID that can be triggered via the yptDevice parameter sent to view/include/head.php. The root cause is improper handling of the yptDevice input, allowing injected scripts to run ...

6.1CVSS5.9AI score0.00612EPSS

SaveExploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by