Read the docs

WWBN

Records365All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical59CVSS 9.0–10.0
CVSS high136CVSS 7.0–8.9

Exploited now

WWBN records in CISA KEV

No WWBN vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Avideo 190 records HIGH Avideo-encoder 3 records MEDIUM

Records

190 records in Avideo · all components

TI-2026-29567 CVE-2026-40911 · GHSA-gph2-j4c9-vhhr

Code injection in WWBN AVideo

Priority HIGH 82

WWBN AVideo is an open source video platform.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00645 Published 2026-04-21 No fix listed CWE-94
TI-2026-25874 CVE-2026-33478 · GHSA-687q-32c6-8x68

Improper access control in WWBN AVideo

Priority HIGH 82

WWBN AVideo is an open source video platform.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.13266 Published 2026-03-23 No fix listed CWE-284
TI-2023-26562 CVE-2023-48728 · GHSA-wv3w-qq6q-g9j3

Cross-site scripting in WWBN AVideo

Priority HIGH 80

A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph videoName functionality of WWBN AVideo 11.6 and dev master commit 3c6bb3ff.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02268 Published 2024-01-10 No fix listed CWE-79
TI-2022-12703 CVE-2022-30547 · GHSA-hf7w-vjx3-6xj6

Path traversal in WWBN AVideo

Priority HIGH 79

A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.6453 Published 2022-08-22 No fix listed CWE-22
TI-2022-12691 CVE-2022-30534 · GHSA-f6mm-7v2x-hf2v

OS command injection in WWBN AVideo

Priority HIGH 79

An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.75566 Published 2022-08-22 No fix listed CWE-78
TI-2020-19308 CVE-2020-37173 · GHSA-349p-7f27-qvx8

AVideo Platform 8.1 - Information Disclosure (User Enumeration)

Priority HIGH 77

AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00671 Published 2026-02-11 No fix listed CWE-359
TI-2026-26098 CVE-2026-33719 · GHSA-r64r-883r-wcwh

Missing authentication in WWBN AVideo

Priority HIGH 76

WWBN AVideo is an open source video platform.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00363 Published 2026-03-23 No fix listed CWE-306
TI-2025-32031 CVE-2025-50128 · GHSA-rh7r-mcgw-hv69

Cross-site scripting in WWBN AVideo

Priority HIGH 76

A cross-site scripting (xss) vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01011 Published 2025-07-24 No fix listed CWE-79
TI-2025-29131 CVE-2025-46410 · GHSA-7qv6-qqv7-4w43

Cross-site scripting in WWBN AVideo

Priority HIGH 76

A cross-site scripting (xss) vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01011 Published 2025-07-24 No fix listed CWE-79
TI-2022-10089 CVE-2022-26842 · GHSA-hpww-gcq4-rc3c

Cross-site scripting in WWBN AVideo

Priority HIGH 76

A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.03933 Published 2022-08-22 No fix listed CWE-79
TI-2020-19307 CVE-2020-37172 · GHSA-8wgf-f4hv-w5qc

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

Priority HIGH 76

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism.

CVSS 4.0HIGH 8.5 Network No auth User interaction EPSS 0.0075 Published 2026-02-11 No fix listed CWE-640
TI-2020-19293 CVE-2020-37158 · GHSA-qxf4-rqx4-9mqj

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

Priority HIGH 76

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism.

CVSS 4.0HIGH 8.5 Network No auth User interaction EPSS 0.00264 Published 2026-02-11 No fix listed CWE-352
Load more
Open these records in search →