Known vulnerabilities in AVideo 11 - page 5

Vendor: World Wide Broadcast Network
Software: AVideo
Version: 11
Software CPE: cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*
Website: https://wwbn.com/
Total vulnerabilities: 120
Public exploits: 16
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting AVideo version 11 AVideo 11 is affected by 120 vulnerabilities: 25 high, 48 medium, 47 low Critical High Medium Low

Vulnerabilities (120)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128355 - Missing Authentication for Critical Function
CVE-2026-43881		 CWE-306 Medium
Public exploit available
No
 - 28.04.2026 SB20260428201
#VU128351 - Improper Verification of Source of a Communication Channel
CVE-2026-43880		 CWE-940 Medium
Public exploit available
No
 - 28.04.2026 SB20260428201
#VU128346 - Server-Side Request Forgery (SSRF)
CVE-2026-43879		 CWE-918 Low
Public exploit available
No
 - 28.04.2026 SB20260428201
#VU128318 - Exposure of sensitive information to an unauthorized actor
CVE-2026-43885		 CWE-200 Medium
Public exploit available
No
 - 28.04.2026 SB20260428201
#VU128302 - Cross-Site Request Forgery (CSRF)
 CWE-352 Low
Public exploit available
No
 - 28.04.2026 SB20260428201
#VU128118 - Cross-Site Request Forgery (CSRF)
CVE-2026-43877		 CWE-352 Low
Public exploit available
No
 - 27.04.2026 SB2026042795
#VU128087 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-43878		 CWE-79 Low
Public exploit available
No
 - 27.04.2026 SB2026042795
#VU128069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-43876		 CWE-79 Low
Public exploit available
No
 - 27.04.2026 SB2026042795
#VU128056 - Information Exposure Through Query Strings in GET Request
CVE-2026-43875		 CWE-598 Medium
Public exploit available
No
 - 27.04.2026 SB2026042795
#VU128055 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-43874		 CWE-79 Low
Public exploit available
No
 - 27.04.2026 SB2026042795
#VU128024 - Information Exposure Through an Error Message
CVE-2026-43873		 CWE-209 Medium
Public exploit available
No
 - 27.04.2026 SB2026042795
#VU125503 - Cross-Site Request Forgery (CSRF)
CVE-2026-35180		 CWE-352 Low
No
No
 29.0 08.04.2026 SB20260408175
#VU125502 - Cross-Site Request Forgery (CSRF)
CVE-2026-35181		 CWE-352 Low
No
No
 29.0 08.04.2026 SB20260408175
#VU125501 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-56347		 CWE-79 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125500 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34739		 CWE-79 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125493 - Cross-Site Request Forgery (CSRF)
CVE-2026-34611		 CWE-352 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125492 - Cross-Site Request Forgery (CSRF)
CVE-2026-34613		 CWE-352 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125481 - Cleartext Storage of Sensitive Information
CVE-2026-33867		 CWE-312 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125461 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33500		 CWE-79 Low
No
No
 29.0 08.04.2026 SB20260408175
#VU125438 - Improper Access Control
CVE-2026-30885		 CWE-284 Medium
No
No
 25.0 08.04.2026 SB2026041527


Showing elements 81 - 100 out of 120