Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WwbnAvideo

19 matches found

CVE
CVE•added 2022/08/22 7:15 p.m.•76 views

CVE-2022-26842

A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP req...

9.6CVSS8.6AI score0.02708EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•68 views

CVE-2022-32770

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6.1AI score0.44557EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•68 views

CVE-2022-32772

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6.1AI score0.21407EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•66 views

CVE-2022-30534

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS8.9AI score0.37387EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•59 views

CVE-2022-28712

A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger thi...

9CVSS8.5AI score0.00857EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•58 views

CVE-2022-32572

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS8.9AI score0.05845EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•57 views

CVE-2022-30547

A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vulnerability.

9.9CVSS9.6AI score0.51618EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•57 views

CVE-2022-32771

A cross-site scripting (xss) vulnerability exists in the footer alerts functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger t...

9.6CVSS6AI score0.31923EPSS
CVE
CVE•added 2022/08/22 7:15 p.m.•51 views

CVE-2022-30690

A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to send a crafted HTTP request to trigger this v...

9.6CVSS6.2AI score0.52412EPSS
CVE
CVE•added 2024/04/10 8:15 p.m.•51 views

CVE-2024-31819

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the submitIndex.php component.

9.8CVSS7.7AI score0.81509EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•42 views

CVE-2023-49599

An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted series of HTTP requests can lead to privilege escalation. An attacker can gather system information via HTTP requests and brute force the salt offline, ...

9.8CVSS9.3AI score0.0029EPSS
CVE
CVE•added 2023/04/25 4:15 p.m.•36 views

CVE-2023-25313

OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the video link field to the Embed a video link feature.

9.8CVSS9.6AI score0.01372EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•36 views

CVE-2023-47862

A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send a series of HTTP requests to trigger this vulnerability.

9.8CVSS9.3AI score0.00881EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•35 views

CVE-2023-48728

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulner...

9.6CVSS6.2AI score0.18417EPSS
CVE
CVE•added 2024/01/10 4:15 p.m.•24 views

CVE-2023-47861

A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerabi...

9CVSS5.6AI score0.00344EPSS
CVE
CVE•added yesterday•2 views

CVE-2025-41420

A cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnera...

9.6CVSS6.1AI score
CVE
CVE•added yesterday•2 views

CVE-2025-46410

A cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to tr...

9.6CVSS6.1AI score
CVE
CVE•added yesterday•2 views

CVE-2025-50128

A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this v...

9.6CVSS6.1AI score
CVE
CVE•added yesterday•2 views

CVE-2025-53084

A cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this vulnerabili...

9CVSS6.1AI score