Known vulnerabilities in AVideo

Vendor: World Wide Broadcast Network
Software: AVideo
Software CPE: cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*
Website: https://wwbn.com/
Total vulnerabilities: 126
Public exploits: 18
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AVideo AVideo is affected by 126 known vulnerabilities: 26 high, 49 medium, 51 low Critical High Medium Low

Vulnerabilities (126)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133421 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-54458		 CWE-79 Low
Available
No
 29.0 05.06.2026 SB2026060512
#VU129521 - Server-Side Request Forgery (SSRF)
CVE-2026-33766		 CWE-918 Low
No
No
 14.3.1 04.05.2026 SB2026050473
#VU129510 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33478		 CWE-78 High
No
No
 29.0 04.05.2026 SB2026050470
#VU129509 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33479		 CWE-94 High
No
No
 29.0 04.05.2026 SB2026050470
#VU129508 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33352		 CWE-89 High
No
No
 29.0 04.05.2026 SB2026050470
#VU129506 - Exposure of sensitive information to an unauthorized actor
CVE-2026-33041		 CWE-200 Medium
No
No
 14.3.1 04.05.2026 SB2026050466
#VU128358 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2026-43882		 CWE-93 Low
Available
No
 - 28.04.2026 SB20260428201
#VU128355 - Missing Authentication for Critical Function
CVE-2026-43881		 CWE-306 Medium
Available
No
 - 28.04.2026 SB20260428201
#VU128274 - Authorization Bypass Through User-Controlled Key
CVE-2026-43883		 CWE-639 Low
Available
No
 - 28.04.2026 SB20260428201
#VU125459 - Server-Side Request Forgery (SSRF)
CVE-2026-33480		 CWE-918 High
No
No
 29.0 08.04.2026 SB2026050470
#VU125458 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33482		 CWE-78 High
No
No
 29.0 08.04.2026 SB2026050470
#VU125457 - Allocation of Resources Without Limits or Throttling
CVE-2026-33483		 CWE-770 Medium
No
No
 29.0 08.04.2026 SB2026050470
#VU125456 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33485		 CWE-89 Medium
No
No
 29.0 08.04.2026 SB2026050470
#VU125455 - External Control of File Name or Path
CVE-2026-33354		 CWE-73 Low
No
No
 29.0 08.04.2026 SB2026050470
#VU125454 - Server-Side Request Forgery (SSRF)
CVE-2026-33351		 CWE-918 High
No
No
 29.0 08.04.2026 SB2026050470
#VU125453 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33292		 CWE-22 Medium
No
No
 26.0 08.04.2026 SB2026050469
#VU125445 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33238		 CWE-22 Low
No
No
 14.3 08.04.2026 SB2026050467
#VU125444 - Server-Side Request Forgery (SSRF)
CVE-2026-33237		 CWE-918 Low
No
No
 14.3 08.04.2026 SB2026050467
#VU125443 - Exposure of sensitive information to an unauthorized actor
CVE-2026-33043		 CWE-200 High
No
No
 14.3.1 08.04.2026 SB2026050466
#VU125439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33035		 CWE-79 Medium
No
No
 25.0 08.04.2026 SB2026050465
SB2026050471


Showing elements 1 - 20 out of 126