Browse CVEs

HIGH 7.5 CVE-2020-37173 AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.js… Avideo No fix yet Fix from $1,9502026-02-11 CRITICAL 9.8 CVE-2020-37172 AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password reco… Avideo Mitigation only Fix from $2,3002026-02-11 HIGH 8.8 CVE-2020-37158 AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password reco… Avideo No fix yet Fix from $1,9502026-02-11 CRITICAL 9.8 CVE-2025-48732 An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead … Avideo Mitigation only Fix from $2,3002025-07-24 MEDIUM 6.1 CVE-2025-50128 A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev master commit … Avideo No fix yet Fix from $1,6002025-07-24 MEDIUM 6.1 CVE-2025-53084 A cross-site scripting (xss) vulnerability exists in the videosList page parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. … Avideo No fix yet Fix from $1,6002025-07-24 CRITICAL 9.6 CVE-2025-36548 A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and dev maste… Avideo No fix yet Fix from $2,3002025-07-24 CRITICAL 9.6 CVE-2025-41420 A cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954… Avideo No fix yet Fix from $2,3002025-07-24 MEDIUM 6.1 CVE-2025-46410 A cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.4 and dev ma… Avideo No fix yet Fix from $1,6002025-07-24 HIGH 7.5 CVE-2025-25214 A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A series … Avideo No fix yet Fix from $1,9502025-07-24 MEDIUM 6.5 CVE-2023-49863 An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit … Avideo No fix yet Fix from $1,6002024-01-10 MEDIUM 6.5 CVE-2023-49864 An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit … Avideo No fix yet Fix from $1,6002024-01-10 MEDIUM 5.3 CVE-2023-50172 A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fe… Avideo No fix yet Fix from $1,6002024-01-10 CRITICAL 9.8 CVE-2023-49599 An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted se… Avideo No fix yet Fix from $2,3002024-01-10 HIGH 8.8 CVE-2023-49589 An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVideo dev master commit 15fed95… Avideo No fix yet Fix from $1,9502024-01-10 HIGH 8.8 CVE-2023-49715 A unrestricted php file upload vulnerability exists in the import.json.php temporary copy functionality of WWBN AVideo dev master commit 15fed957fb. … Avideo No fix yet Fix from $1,9502024-01-10 HIGH 7.5 CVE-2023-49738 An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted … Avideo No fix yet Fix from $1,9502024-01-10 MEDIUM 6.5 CVE-2023-49810 A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specia… Avideo No fix yet Fix from $1,6002024-01-10 MEDIUM 6.5 CVE-2023-49862 An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit … Avideo No fix yet Fix from $1,6002024-01-10 CRITICAL 9.8 CVE-2023-47862 A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially craf… Avideo Mitigation only Fix from $2,3002024-01-10 MEDIUM 6.5 CVE-2023-47171 An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 1… Avideo No fix yet Fix from $1,6002024-01-10 MEDIUM 6.1 CVE-2023-48728 A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb… Avideo No fix yet Fix from $1,6002024-01-10 MEDIUM 5.4 CVE-2023-47861 A cross-site scripting (xss) vulnerability exists in the channelBody.php user name functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb… Avideo No fix yet Fix from $1,6002024-01-10 MEDIUM 5.4 CVE-2023-48730 A cross-site scripting (xss) vulnerability exists in the navbarMenuAndLogo.php user name functionality of WWBN AVideo dev master commit 15fed957fb. A… Avideo Mitigation only Fix from $1,6002024-01-10 HIGH 8.8 CVE-2022-30605 A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted H… Avideo No fix yet Fix from $1,9502022-08-22 HIGH 8.8 CVE-2022-32282 An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' passw… Avideo No fix yet Fix from $1,9502022-08-22 HIGH 8.8 CVE-2022-32572EPSS 24% An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-… Avideo No fix yet Fix from $1,9502022-08-22 HIGH 8.8 CVE-2022-33147 A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP requ… Avideo No fix yet Fix from $1,9502022-08-22 HIGH 8.8 CVE-2022-33148 A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP requ… Avideo Mitigation only Fix from $1,9502022-08-22 HIGH 8.8 CVE-2022-33149 A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP requ… Avideo Mitigation only Fix from $1,9502022-08-22