Vulnerability index

Browse CVEs

45 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Avideo HIGH 7.5
CVE-2020-37173

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.js…

No fix yet
Fix from $1,950 2026-02-11
Avideo CRITICAL 9.8
CVE-2020-37172

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password reco…

Mitigation only
Fix from $2,300 2026-02-11
Avideo HIGH 8.8
CVE-2020-37158

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password reco…

No fix yet
Fix from $1,950 2026-02-11
Avideo CRITICAL 9.8
CVE-2025-48732

An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead …

Mitigation only
Fix from $2,300 2025-07-24
Avideo MEDIUM 6.1
CVE-2025-50128

A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev master commit …

No fix yet
Fix from $1,600 2025-07-24
Avideo MEDIUM 6.1
CVE-2025-53084

A cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. …

No fix yet
Fix from $1,600 2025-07-24
Avideo CRITICAL 9.6
CVE-2025-36548

A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and dev maste…

No fix yet
Fix from $2,300 2025-07-24
Avideo CRITICAL 9.6
CVE-2025-41420

A cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954…

No fix yet
Fix from $2,300 2025-07-24
Avideo MEDIUM 6.1
CVE-2025-46410

A cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.4 and dev ma…

No fix yet
Fix from $1,600 2025-07-24
Avideo HIGH 7.5
CVE-2025-25214

A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A series …

No fix yet
Fix from $1,950 2025-07-24
Avideo MEDIUM 6.5
CVE-2023-49863

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit …

No fix yet
Fix from $1,600 2024-01-10
Avideo MEDIUM 6.5
CVE-2023-49864

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit …

No fix yet
Fix from $1,600 2024-01-10
Avideo MEDIUM 5.3
CVE-2023-50172

A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fe…

No fix yet
Fix from $1,600 2024-01-10
Avideo CRITICAL 9.8
CVE-2023-49599

An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted se…

No fix yet
Fix from $2,300 2024-01-10
Avideo HIGH 8.8
CVE-2023-49589

An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVideo dev master commit 15fed95…

No fix yet
Fix from $1,950 2024-01-10
Avideo HIGH 8.8
CVE-2023-49715

A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. …

No fix yet
Fix from $1,950 2024-01-10
Avideo HIGH 7.5
CVE-2023-49738

An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted …

No fix yet
Fix from $1,950 2024-01-10
Avideo MEDIUM 6.5
CVE-2023-49810

A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specia…

No fix yet
Fix from $1,600 2024-01-10
Avideo MEDIUM 6.5
CVE-2023-49862

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit …

No fix yet
Fix from $1,600 2024-01-10
Avideo CRITICAL 9.8
CVE-2023-47862

A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially craf…

Mitigation only
Fix from $2,300 2024-01-10
Avideo MEDIUM 6.5
CVE-2023-47171

An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 1…

No fix yet
Fix from $1,600 2024-01-10
Avideo MEDIUM 6.1
CVE-2023-48728

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb…

No fix yet
Fix from $1,600 2024-01-10
Avideo MEDIUM 5.4
CVE-2023-47861

A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb…

No fix yet
Fix from $1,600 2024-01-10
Avideo MEDIUM 5.4
CVE-2023-48730

A cross-site scripting (xss) vulnerability exists in the navbarMenuAndLogo.php user name functionality of WWBN AVideo dev master commit 15fed957fb. A…

Mitigation only
Fix from $1,600 2024-01-10
Avideo HIGH 8.8
CVE-2022-30605

A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted H…

No fix yet
Fix from $1,950 2022-08-22
Avideo HIGH 8.8
CVE-2022-32282

An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' passw…

No fix yet
Fix from $1,950 2022-08-22
Avideo HIGH 8.8
CVE-2022-32572EPSS 24%

An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-…

No fix yet
Fix from $1,950 2022-08-22
Avideo HIGH 8.8
CVE-2022-33147

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP requ…

No fix yet
Fix from $1,950 2022-08-22
Avideo HIGH 8.8
CVE-2022-33148

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP requ…

Mitigation only
Fix from $1,950 2022-08-22
Avideo HIGH 8.8
CVE-2022-33149

A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP requ…

Mitigation only
Fix from $1,950 2022-08-22