Known vulnerabilities in AVideo 11 - page 3

Vendor: World Wide Broadcast Network
Software: AVideo
Version: 11
Software CPE: cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*
Website: https://wwbn.com/
Total vulnerabilities: 120
Public exploits: 16
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting AVideo version 11 AVideo 11 is affected by 120 vulnerabilities: 25 high, 48 medium, 47 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU129526 - Cross-Site Request Forgery (CSRF)
CVE-2026-34394		 CWE-352 High
No
No
 29.0 04.05.2026 SB2026050472
#VU129525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34396		 CWE-79 Medium
No
No
 29.0 04.05.2026 SB2026050472
#VU129524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34375		 CWE-79 Medium
No
No
 29.0 04.05.2026 SB2026050472
#VU129523 - Missing Authorization
CVE-2026-56341		 CWE-862 Medium
No
No
 29.0 04.05.2026 SB2026050472
#VU129522 - Authorization Bypass Through User-Controlled Key
CVE-2026-33764		 CWE-639 Low
No
No
 29.0 04.05.2026 SB2026050472
#VU129520 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33681		 CWE-22 Low
No
No
 29.0 04.05.2026 SB2026050472
#VU129519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33683		 CWE-79 Low
No
No
 29.0 04.05.2026 SB2026050472
#VU129518 - Missing Authorization
CVE-2026-33685		 CWE-862 Medium
No
No
 29.0 04.05.2026 SB2026050472
#VU129517 - Server-Side Request Forgery (SSRF)
CVE-2026-56342		 CWE-918 Low
No
No
 29.0 04.05.2026 SB2026050472
#VU129516 - Use of Less Trusted Source
CVE-2026-33690		 CWE-348 Medium
No
No
 29.0 04.05.2026 SB2026050472
#VU129515 - Unrestricted Upload of File with Dangerous Type
CVE-2026-33647		 CWE-434 Medium
No
No
 29.0 04.05.2026 SB2026050472
#VU129514 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33648		 CWE-78 Medium
No
No
 29.0 04.05.2026 SB2026050472
#VU129513 - Cross-Site Request Forgery (CSRF)
CVE-2026-33649		 CWE-352 High
No
No
 29.0 04.05.2026 SB2026050472
#VU129512 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33651		 CWE-89 Medium
No
No
 29.0 04.05.2026 SB2026050472
#VU125513 - Insufficient Verification of Data Authenticity
CVE-2026-39366		 CWE-345 Low
No
No
 29.0 08.04.2026 SB2026050472
#VU125512 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-39367		 CWE-79 Low
No
No
 29.0 08.04.2026 SB2026050472
#VU125511 - Server-Side Request Forgery (SSRF)
CVE-2026-39368		 CWE-918 Low
No
No
 29.0 08.04.2026 SB2026050472
#VU125510 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-39369		 CWE-22 Low
No
No
 29.0 08.04.2026 SB2026050472
#VU125455 - External Control of File Name or Path
CVE-2026-33354		 CWE-73 Low
No
No
 29.0 08.04.2026 SB2026050470
#VU125454 - Server-Side Request Forgery (SSRF)
CVE-2026-33351		 CWE-918 High
No
No
 29.0 08.04.2026 SB2026050470


Showing elements 41 - 60 out of 120