Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WwbnAvideo11.6

25 matches found

CVE
CVE•added 2022/08/22 7:15 p.m.•76 views

CVE-2022-26842

A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP req...

9.6CVSS8.6AI score0.02708EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•68 views

CVE-2022-32770

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6.1AI score0.44557EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•68 views

CVE-2022-32772

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6.1AI score0.21407EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•66 views

CVE-2022-30534

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS8.9AI score0.37387EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•64 views

CVE-2022-32768

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP request...

4.8CVSS4.8AI score0.00021EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•64 views

CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the aVideoEncoder fun...

8.8CVSS8.9AI score0.0052EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•59 views

CVE-2022-28712

A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

9CVSS8.5AI score0.00857EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•59 views

CVE-2022-32761

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.

6.5CVSS6.4AI score0.00527EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•58 views

CVE-2022-32572

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS8.9AI score0.05845EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•57 views

CVE-2022-30547

A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS9.6AI score0.51618EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•57 views

CVE-2022-32771

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6AI score0.31923EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•56 views

CVE-2022-33149

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the CloneSite plugin,...

8.8CVSS8.9AI score0.00568EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•53 views

CVE-2022-32777

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the sessi...

7.5CVSS7.2AI score0.01188EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•52 views

CVE-2022-34652

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules pl...

8.8CVSS8.9AI score0.00334EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•51 views

CVE-2022-30690

A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this v...

9.6CVSS6.2AI score0.52412EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•50 views

CVE-2022-29468

A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.

8.8CVSS8.5AI score0.01086EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•50 views

CVE-2022-32778

An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses the secure flag, which allows the sessi...

7.5CVSS7.3AI score0.01188EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•49 views

CVE-2022-28710

An information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.

6.5CVSS6.4AI score0.00527EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•47 views

CVE-2022-32769

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP request...

5CVSS5.3AI score0.0002EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•45 views

CVE-2022-32282

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.

8.8CVSS8.6AI score0.00124EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•42 views

CVE-2022-33148

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulnerability exists in the Live Schedules pl...

8.8CVSS8.9AI score0.00437EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•39 views

CVE-2022-30605

A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.

8.8CVSS8.6AI score0.00689EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•35 views

CVE-2023-48728

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulner...

9.6CVSS6.2AI score0.18417EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•24 views

CVE-2023-47861

A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerabi...

9CVSS5.6AI score0.00344EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•22 views

CVE-2023-47171

An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.

6.5CVSS6.4AI score0.00309EPSS