Known vulnerabilities in AVideo - page 3

Vendor: World Wide Broadcast Network
Software: AVideo
Software CPE: cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*
Website: https://wwbn.com/
Total vulnerabilities: 126
Public exploits: 18
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AVideo AVideo is affected by 126 known vulnerabilities: 26 high, 49 medium, 51 low Critical High Medium Low

Vulnerabilities (126)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU139053 - Missing Authentication for Critical Function
CVE-2026-72748		 CWE-306 High
Available
No
 - 22.07.2026 SB2026072213
#VU136896 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-63304		 CWE-78 High
No
No
 - 03.07.2026 SB2026070355
#VU136895 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-63305		 CWE-78 High
No
No
 - 03.07.2026 SB2026070355
#VU129507 - Missing Authentication for Critical Function
CVE-2026-56346		 CWE-306 Medium
No
No
 26.0 04.05.2026 SB2026050468
#VU125492 - Cross-Site Request Forgery (CSRF)
CVE-2026-34613		 CWE-352 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125481 - Cleartext Storage of Sensitive Information
CVE-2026-33867		 CWE-312 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125452 - Server-Side Request Forgery (SSRF)
CVE-2026-33294		 CWE-918 Low
No
No
 26.0 08.04.2026 SB20260408173
#VU125450 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-33319		 CWE-78 Low
No
No
 26.0 08.04.2026 SB2026050468
#VU125448 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33295		 CWE-79 Low
No
No
 26.0 08.04.2026 SB2026050468
#VU125447 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-33296		 CWE-601 Medium
No
No
 26.0 08.04.2026 SB2026050468
#VU125446 - Authorization Bypass Through User-Controlled Key
CVE-2026-33297		 CWE-639 Low
No
No
 26.0 08.04.2026 SB2026050468
#VU125435 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-28501		 CWE-89 High
Available
Exploited
 22.0 08.04.2026 SB20260408172
#VU125434 - Server-Side Request Forgery (SSRF)
CVE-2026-27732		 CWE-918 Low
No
No
 22.0 08.04.2026 SB20260408172
#VU76173 - Command injection
CVE-2023-32073		 CWE-77 High
Available
No
 12.4 16.05.2023 SB2023051611
#VU76172 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-30854		 CWE-78 Medium
No
No
 12.4 16.05.2023 SB2023051611
#VU75600 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-30860		 CWE-79 Medium
No
No
 12.4 01.05.2023 SB2023042656
#VU75564 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-25313		 CWE-78 High
No
No
 12.4 28.04.2023 SB2023042656
#VU75563 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
 CWE-78 High
No
No
 12.4 28.04.2023 SB2023042656
#VU75533 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-25314		 CWE-79 Low
No
No
 12.4 26.04.2023 SB2023042656
#VU125432 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-23489		 CWE-22 Low
No
No
 8.9 02.02.2023 SB2023020252


Showing elements 41 - 60 out of 126