Known vulnerabilities in AVideo - page 6

Vendor: World Wide Broadcast Network
Software: AVideo
Software CPE: cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*
Website: https://wwbn.com/
Total vulnerabilities: 123
Public exploits: 17
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting AVideo AVideo is affected by 123 known vulnerabilities: 26 high, 48 medium, 49 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125509 - Server-Side Request Forgery (SSRF)
CVE-2026-39370		 CWE-918 Low
No
No
 29.0 08.04.2026 SB20260408175
#VU125503 - Cross-Site Request Forgery (CSRF)
CVE-2026-35180		 CWE-352 Low
No
No
 29.0 08.04.2026 SB20260408175
#VU125477 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33767		 CWE-89 Low
No
No
 26.0 08.04.2026 SB20260408174
#VU125476 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-33770		 CWE-89 Low
No
No
 26.0 08.04.2026 SB20260408174
#VU125466 - Server-Side Request Forgery (SSRF)
CVE-2026-33502		 CWE-918 High
No
No
 29.0 08.04.2026 SB20260408175
#VU125461 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-33500		 CWE-79 Low
No
No
 29.0 08.04.2026 SB20260408175
#VU125460 - Missing Authorization
CVE-2026-33501		 CWE-862 Medium
No
No
 29.0 08.04.2026 SB20260408175
#VU125452 - Server-Side Request Forgery (SSRF)
CVE-2026-33294		 CWE-918 Low
No
No
 26.0 08.04.2026 SB20260408173
#VU125451 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-33293		 CWE-22 Medium
No
No
 26.0 08.04.2026 SB20260408174
#VU125442 - Server-Side Request Forgery (SSRF)
CVE-2026-33039		 CWE-918 High
No
No
 26.0 08.04.2026 SB20260408173
#VU125441 - Missing Authentication for Critical Function
CVE-2026-33038		 CWE-306 High
No
No
 24.0 08.04.2026 SB20260408173
#VU125440 - Insecure Default Initialization of Resource
CVE-2026-33037		 CWE-1188 High
No
No
 24.0 08.04.2026 SB20260408173
#VU125437 - Exposure of resource to wrong sphere
CVE-2026-29093		 CWE-668 High
No
No
 24.0 08.04.2026 SB20260408173
#VU125436 - Unrestricted Upload of File with Dangerous Type
CVE-2026-28502		 CWE-434 Medium
No
No
 24.0 08.04.2026 SB20260408173
#VU125435 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-28501		 CWE-89 High
Available
Exploited
 22.0 08.04.2026 SB20260408172
#VU125434 - Server-Side Request Forgery (SSRF)
CVE-2026-27732		 CWE-918 Low
No
No
 22.0 08.04.2026 SB20260408172
#VU76173 - Command injection
CVE-2023-32073		 CWE-77 High
Available
No
 12.4 16.05.2023 SB2023051611
#VU76172 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-30854		 CWE-78 Medium
No
No
 12.4 16.05.2023 SB2023051611
#VU75564 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-25313		 CWE-78 High
No
No
 12.4 28.04.2023 SB2023042656
#VU75533 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-25314		 CWE-79 Low
No
No
 12.4 26.04.2023 SB2023042656


Showing elements 101 - 120 out of 123