Lucene search
+L

6 matches found

CVE
CVE
•added 2026/08/28 10:49 a.m.•27 views

CVE-2026-81732

WWBN AVideo through version 30.0 contains an information disclosure vulnerability caused by missing authentication on the report4.json.php and report4.1.json.php endpoints. An unauthenticated attacker can issue GET requests to retrieve daily and cumulative user-registration counts without any ses...

6.9CVSS5.8AI score0.00559EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/28 10:49 a.m.•19 views

CVE-2026-81732 WWBN AVideo through 30.0 Information Disclosure via report4.json.php

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

6.9CVSS5.8AI score0.00559EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/28 10:49 a.m.•16 views

EUVD-2026-67683

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

6.9CVSS5.9AI score0.00559EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/28 10:49 a.m.•42 views

CVE-2026-81732 WWBN AVideo through 30.0 Information Disclosure via report4.json.php

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

6.9CVSS0.00559EPSS
SaveExploits0References2
Mend
Mend
•added 2026/08/28 10:49 a.m.•2 views

CVE-2026-81732

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

6.9CVSS0.00559EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/28 12:00 a.m.•6 views

CVE-2026-81732: Exposure of Sensitive Information to an Unauthorized Actor

WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts...

6.9CVSS5.8AI score0.00559EPSS
SaveExploits0References2
Rows per page
Query Builder