Browse CVEs

MEDIUM 5.3 CVE-2026-33761 WWBN AVideo is an open source video platform. In versions up to and including 26.0, three `list.json.php` endpoints in the Scheduler plugin lack any … Avideo after 26.0 Fix from $1,6002026-03-27 MEDIUM 5.3 CVE-2026-33763 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `get_api_video_password_is_correct` API endpoint allows any u… Avideo after 26.0 Fix from $1,6002026-03-27 CRITICAL 9.4 CVE-2026-33716 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the standalone live stream control endpoint at `plugin/Live/stand… Avideo after 26.0 Fix from $2,3002026-03-23 HIGH 8.8 CVE-2026-33717 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `downloadVideoFromDownloadURL()` function in `objects/aVideoE… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 8.6 CVE-2026-33719 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the CDN plugin endpoints `plugin/CDN/status.json.php` and `plugin… Avideo after 26.0 Fix from $1,9502026-03-23 MEDIUM 6.5 CVE-2026-33723 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `Subscribe::save()` method in `objects/subscribe.php` concate… Avideo after 26.0 Fix from $1,6002026-03-23 MEDIUM 5.3 CVE-2026-33688 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the password recovery endpoint at `objects/userRecoverPass.php` p… Avideo after 26.0 Fix from $1,6002026-03-23 MEDIUM 5.3 CVE-2026-33690 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `getRealIpAddr()` function in `objects/functions.php` trusts … Avideo after 26.0 Fix from $1,6002026-03-23 HIGH 8.8 CVE-2026-33649 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/Permissions/setPermission.json.php` endpoint accepts … Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 8.8 CVE-2026-33651 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `remindMe.json.php` endpoint passes `$_REQUEST['live_schedule… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 7.6 CVE-2026-33650 WWBN AVideo is an open source video platform. In versions up to and including 26.0, a user with the "Videos Moderator" permission can escalate privil… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 7.2 CVE-2026-33681 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `objects/pluginRunDatabaseScript.json.php` endpoint accepts a… Avideo after 26.0 Fix from $1,9502026-03-23 MEDIUM 5.4 CVE-2026-33683 WWBN AVideo is an open source video platform. In versions up to and including 26.0, a sanitization order-of-operations flaw in the user profile "abou… Avideo after 26.0 Fix from $1,6002026-03-23 MEDIUM 5.3 CVE-2026-33685 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `plugin/AD_Server/reports.json.php` endpoint performs no auth… Avideo after 26.0 Fix from $1,6002026-03-23 HIGH 8.8 CVE-2026-33647 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `ImageGallery::saveFile()` method validates uploaded file con… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 8.8 CVE-2026-33648 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the restreamer endpoint constructs a log file path by embedding u… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 7.5 CVE-2026-33512 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the API plugin exposes a `decryptString` action without any authe… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 7.5 CVE-2026-33513 WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated API endpoint (`APIName=locale`) concatenates u… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 8.8 CVE-2026-33507 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `objects/pluginImport.json.php` endpoint allows admin users t… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 8.2 CVE-2026-33502 WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated server-side request forgery vulnerability in `… Avideo after 26.0 Fix from $1,9502026-03-23 MEDIUM 6.1 CVE-2026-33499 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `view/forbiddenPage.php` and `view/warningPage.php` templates… Avideo after 26.0 Fix from $1,6002026-03-23 MEDIUM 5.4 CVE-2026-33500 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the fix for CVE-2026-27568 (GHSA-rcqw-6466-3mv7) introduced a cus… Avideo after 26.0 Fix from $1,6002026-03-23 MEDIUM 5.3 CVE-2026-33501 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the endpoint `plugin/Permissions/View/Users_groups_permissions/li… Avideo after 26.0 Fix from $1,6002026-03-23 HIGH 8.1 CVE-2026-33488 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `createKeys()` function in the LoginControl plugin's PGP 2FA … Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 8.1 CVE-2026-33493 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `objects/import.json.php` endpoint accepts a user-controlled … Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 7.3 CVE-2026-33492 WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo's `_session_start()` function accepts arbitrary session ID… Avideo after 26.0 Fix from $1,9502026-03-23 CRITICAL 10.0 CVE-2026-33478EPSS 13% WWBN AVideo is an open source video platform. In versions up to and including 26.0, multiple vulnerabilities in AVideo's CloneSite plugin chain toget… Avideo after 26.0 Fix from $2,3002026-03-23 HIGH 8.8 CVE-2026-33479 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the Gallery plugin's `saveSort.json.php` endpoint passes unsaniti… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 8.6 CVE-2026-33480 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `isSSRFSafeURL()` function in AVideo can be bypassed using IP… Avideo after 26.0 Fix from $1,9502026-03-23 HIGH 8.1 CVE-2026-33482 WWBN AVideo is an open source video platform. In versions up to and including 26.0, the `sanitizeFFmpegCommand()` function in `plugin/API/standAlone/… Avideo after 26.0 Fix from $1,9502026-03-23