Advisories · Technology
WWBN AVideo-Encoder.
Every CVE that names WWBN AVideo-Encoder among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.7 Medium
AVideo-Encoder vulnerable to stored DOM cross-site scripting through queue titles
- WWBN AVideo-Encoder
- Cross-site scripting (XSS)
- CVSS 7.5 High
AVideo-Encoder: pre-authentication streamer-login SQL injection
- WWBN AVideo-Encoder
- SQL injection
- CVSS 7.3 High
AVideo-Encoder: missing authentication on control and status endpoints
- WWBN AVideo-Encoder
- Authentication bypass
- Broken access control
- CVSS 8.6 High
AVideo-Encoder: unauthenticated full-response server-side request forgery
- WWBN AVideo-Encoder
- Server-side request forgery (SSRF)
- CVSS 6.1 Medium
AVideo-Encoder: reflected cross-site scripting in the login interface
- WWBN AVideo-Encoder
- Cross-site scripting (XSS)
- CVSS 10.0 CriticalCritical · CVSS 9+
AVideo-Encoder: unauthenticated command execution through streamer login trust
- WWBN AVideo-Encoder
- Command injection
- CVSS 10.0 CriticalCritical · CVSS 9+
AVideo-Encoder: unauthenticated installer PHP code injection
- WWBN AVideo-Encoder
- Code injection
- CVSS 8.6 High
AVideo-Encoder is Vulnerable to Authenticated SQL Injection via ORDER BY Clause
- WWBN AVideo-Encoder
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
AVideo-Encoder has Unauthenticated Blind Server-Side Request Forgery via Public Thumbnail Generator
- WWBN AVideo-Encoder
- Server-side request forgery (SSRF)