Advisories · Technology

WWBN AVideo.

Every CVE that names WWBN AVideo among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-81733 CVE record

CVSS 5.1 Medium

WWBN AVideo through 30.0 CSRF via myLiveControls.save.json.php
- WWBN AVideo
- Cross-site request forgery (CSRF)
Not analysed yet 28 Aug 2026
CVE-2026-81732 CVE record

CVSS 6.9 Medium

WWBN AVideo through 30.0 Information Disclosure via report4.json.php
- WWBN AVideo
- Information disclosure
Not analysed yet 28 Aug 2026
CVE-2026-81678 CVE record

CVSS 6.9 Medium

AVideo SSRF Guard Bypass via IPv6 Transition Addresses
- WWBN AVideo
- Server-side request forgery (SSRF)
Not analysed yet 27 Aug 2026
CVE-2026-59808 CVE record

CVSS 8.7 High

AVideo Authentication Bypass via Unkeyed Video Hash Disclosure
- WWBN AVideo
- Authentication bypass
Not analysed yet 22 Aug 2026
CVE-2026-59256 CVE record

CVSS 8.7 High

WWBN AVideo Unbound Token Authorization Bypass via Gallery
- WWBN AVideo
- Information disclosure
Not analysed yet 22 Aug 2026
CVE-2026-58003 CVE record

CVSS 7.1 High

WWBN AVideo Cross-Site Request Forgery via releaseVideoNow.json.php
- WWBN AVideo
- Cross-site request forgery (CSRF)
Not analysed yet 22 Aug 2026
CVE-2026-58002 CVE record

CVSS 7.1 High

WWBN AVideo Authorization Bypass via Users_affiliations add.json.php
- WWBN AVideo
- CWE-345
Not analysed yet 22 Aug 2026
CVE-2026-58001 CVE record

CVSS 6.9 Medium

WWBN AVideo Cross-Site Request Forgery via videoEditLight.php
- WWBN AVideo
- Cross-site request forgery (CSRF)
Not analysed yet 22 Aug 2026
CVE-2026-57944 CVE record

CVSS 5.3 Medium

AVideo channelToGallery.json.php Cross-Site Request Forgery
- WWBN AVideo
- Cross-site request forgery (CSRF)
Not analysed yet 22 Aug 2026
CVE-2026-56380 CVE record

CVSS 6.9 Medium

AVideo feed/index.php Exposure of Channel Owner Email Address
- WWBN AVideo
- Information disclosure
Not analysed yet 22 Aug 2026
CVE-2026-72748 CVE record

CVSS 6.9 Medium

AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.php
- WWBN AVideo
- Authentication bypass
Not analysed yet 11 Aug 2026
CVE-2026-72747 CVE record

CVSS 5.1 Medium

AVideo Stored Cross-Site Scripting via Unauthenticated Registration
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 11 Aug 2026
CVE-2026-64626 CVE record

CVSS 5.3 Medium

AVideo Encoder downloadURL SSRF via unpinned retry fallback
- WWBN AVideo
- Server-side request forgery (SSRF)
Not analysed yet 20 Jul 2026
CVE-2026-64625 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

AVideo before 29.0 OS Command Injection via execAsync
- WWBN AVideo
- Command injection
Not analysed yet 20 Jul 2026
CVE-2026-63305 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

AVideo through 29.0 OS Command Injection via ffmpeg.json.php
- WWBN AVideo
- Command injection
Not analysed yet 16 Jul 2026
CVE-2026-63304 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

AVideo through 29.0 OS Command Injection via listFFmpegProcesses
- WWBN AVideo
- Command injection
Not analysed yet 16 Jul 2026
CVE-2026-35180 CVE record

CVSS 4.3 Medium

WWBN AVideo affected by CSRF on Site Customization Endpoint Enables Logo Overwrite via Base64 File Write
- WWBN AVideo
- Cross-site request forgery (CSRF)
Not analysed yet 6 Apr 2026
CVE-2026-34374 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

AVideo has SQL Injection in Live_schedule::keyExists() via Unparameterized Stream Key
- WWBN AVideo
- SQL injection
Not analysed yet 27 Mar 2026
CVE-2026-33037 CVE record

CVSS 8.1 High

WWBN AVideo has predictable default admin credentials in official Docker deployment path
- WWBN AVideo
- CWE-1188
Not analysed yet 20 Mar 2026
CVE-2025-46410 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 24 Jul 2025
CVE-2025-53084 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 24 Jul 2025
CVE-2025-50128 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 24 Jul 2025
CVE-2025-36548 CVE record

CVSS 8.3 High

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 24 Jul 2025
CVE-2025-41420 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 24 Jul 2025
CVE-2025-25214 CVE record

CVSS 8.8 High

Race condition in WWBN AVideo
- WWBN AVideo
- Race condition
Not analysed yet 24 Jul 2025
CVE-2025-48732 CVE record

CVSS 7.3 High

WWBN AVideo: An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master…
- WWBN AVideo
- CWE-184
Not analysed yet 24 Jul 2025
CVE-2023-47171 CVE record

CVSS 6.5 Medium

External control of a file path in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-49864 CVE record

CVSS 6.5 Medium

External control of a file path in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-49863 CVE record

CVSS 6.5 Medium

External control of a file path in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-49862 CVE record

CVSS 6.5 Medium

External control of a file path in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-49738 CVE record

CVSS 7.5 High

External control of a file path in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-48730 CVE record

CVSS 8.5 High

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 10 Jan 2024
CVE-2023-48728 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 10 Jan 2024
CVE-2023-47861 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 10 Jan 2024
CVE-2023-49715 CVE record

CVSS 4.3 Medium

Unrestricted file upload in WWBN AVideo
- WWBN AVideo
- Unrestricted file upload
Not analysed yet 10 Jan 2024
CVE-2023-47862 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

External control of a file path in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 10 Jan 2024
CVE-2023-49589 CVE record

CVSS 8.8 High

Weak password recovery in WWBN AVideo
- WWBN AVideo
- CWE-640
Not analysed yet 10 Jan 2024
CVE-2022-34652 CVE record

CVSS 8.3 High

SQL injection in WWBN AVideo
- WWBN AVideo
- SQL injection
Not analysed yet 22 Aug 2022
CVE-2022-33149 CVE record

CVSS 8.3 High

SQL injection in WWBN AVideo
- WWBN AVideo
- SQL injection
Not analysed yet 22 Aug 2022
CVE-2022-33148 CVE record

CVSS 8.3 High

SQL injection in WWBN AVideo
- WWBN AVideo
- SQL injection
Not analysed yet 22 Aug 2022
CVE-2022-33147 CVE record

CVSS 8.3 High

SQL injection in WWBN AVideo
- WWBN AVideo
- SQL injection
Not analysed yet 22 Aug 2022
CVE-2022-32778 CVE record

CVSS 7.5 High

Incorrect permission assignment in WWBN AVideo
- WWBN AVideo
- Broken access control
Not analysed yet 22 Aug 2022
CVE-2022-32777 CVE record

CVSS 7.5 High

Incorrect permission assignment in WWBN AVideo
- WWBN AVideo
- Broken access control
Not analysed yet 22 Aug 2022
CVE-2022-32772 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 22 Aug 2022
CVE-2022-32771 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 22 Aug 2022
CVE-2022-32770 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 22 Aug 2022
CVE-2022-32769 CVE record

CVSS 4.8 Medium

Missing authorization in WWBN AVideo
- WWBN AVideo
- Broken access control
Not analysed yet 22 Aug 2022
CVE-2022-32768 CVE record

CVSS 4.8 Medium

Missing authorization in WWBN AVideo
- WWBN AVideo
- Broken access control
Not analysed yet 22 Aug 2022
CVE-2022-32761 CVE record

CVSS 6.5 Medium

External control of a file path in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 22 Aug 2022
CVE-2022-32572 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in WWBN AVideo
- WWBN AVideo
- Command injection
Not analysed yet 22 Aug 2022
CVE-2022-32282 CVE record

CVSS 7.2 High

WWBN AVideo: An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev…
- WWBN AVideo
- CWE-836
Not analysed yet 22 Aug 2022
CVE-2022-30690 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 22 Aug 2022
CVE-2022-30605 CVE record

CVSS 8.8 High

Session fixation in WWBN AVideo
- WWBN AVideo
- Authentication bypass
Not analysed yet 22 Aug 2022
CVE-2022-30547 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Path traversal in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 22 Aug 2022
CVE-2022-30534 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

OS command injection in WWBN AVideo
- WWBN AVideo
- Command injection
Not analysed yet 22 Aug 2022
CVE-2022-29468 CVE record

CVSS 8.8 High

Cross-site request forgery in WWBN AVideo
- WWBN AVideo
- Cross-site request forgery (CSRF)
Not analysed yet 22 Aug 2022
CVE-2022-28712 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 22 Aug 2022
CVE-2022-28710 CVE record

CVSS 6.5 Medium

External control of a file path in WWBN AVideo
- WWBN AVideo
- Path traversal
Not analysed yet 22 Aug 2022
CVE-2022-26842 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site scripting in WWBN AVideo
- WWBN AVideo
- Cross-site scripting (XSS)
Not analysed yet 22 Aug 2022
CVE-2021-21286 CVE record

CVSS 7.7 High

Authorization Bypass in AVideo Platform
- WWBN AVideo
- Broken access control
Not analysed yet 1 Feb 2021