Known vulnerabilities in AVideo 11 - page 3

Vendor: World Wide Broadcast Network
Software: AVideo
Version: 11
Software CPE: cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*
Website: https://wwbn.com/
Total vulnerabilities: 120
Public exploits: 16
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting AVideo version 11 AVideo 11 is affected by 120 vulnerabilities: 25 high, 48 medium, 47 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136896 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-63304		 CWE-78 High
No
No
 - 03.07.2026 SB2026070355
#VU136895 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-63305		 CWE-78 High
No
No
 - 03.07.2026 SB2026070355
#VU129507 - Missing Authentication for Critical Function
CVE-2026-56346		 CWE-306 Medium
No
No
 26.0 04.05.2026 SB2026050468
#VU125501 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-56347		 CWE-79 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34739		 CWE-79 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125493 - Cross-Site Request Forgery (CSRF)
CVE-2026-34611		 CWE-352 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125492 - Cross-Site Request Forgery (CSRF)
CVE-2026-34613		 CWE-352 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125481 - Cleartext Storage of Sensitive Information
CVE-2026-33867		 CWE-312 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125450 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33319		 CWE-78 Low
No
No
 26.0 08.04.2026 SB2026050468
#VU125448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33295		 CWE-79 Low
No
No
 26.0 08.04.2026 SB2026050468
#VU125447 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-33296		 CWE-601 Medium
No
No
 26.0 08.04.2026 SB2026050468
#VU125446 - Authorization Bypass Through User-Controlled Key
CVE-2026-33297		 CWE-639 Low
No
No
 26.0 08.04.2026 SB2026050468
#VU125435 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-28501		 CWE-89 High
Public exploit available
Exploited
 22.0 08.04.2026 SB20260408172
#VU125434 - Server-Side Request Forgery (SSRF)
CVE-2026-27732		 CWE-918 Low
No
No
 22.0 08.04.2026 SB20260408172
#VU76173 - Command injection
CVE-2023-32073		 CWE-77 High
Public exploit available
No
 12.4 16.05.2023 SB2023051611
#VU76172 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-30854		 CWE-78 Medium
No
No
 12.4 16.05.2023 SB2023051611
#VU75600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-30860		 CWE-79 Medium
No
No
 12.4 01.05.2023 SB2023042656
#VU75564 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-25313		 CWE-78 High
No
No
 12.4 28.04.2023 SB2023042656
#VU75563 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 High
No
No
 12.4 28.04.2023 SB2023042656
#VU75533 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-25314		 CWE-79 Low
No
No
 12.4 26.04.2023 SB2023042656


Showing elements 41 - 60 out of 120