İçeriğe atla
Noroxi

WWBN kayıtları

wwbn üreticisine ait 193 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
5 · %2,6
Pre-auth RCE
16
Düzeltme kaydı olan
%13
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 21
  3. 22
  4. 23
  5. 24
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

193 kayıt
  • CVE-2022-30547
    58Planlayın

    A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

    KritikCVSS 9,9İstismar yokEPSS %64

    wwbn · avideo22 Ağu 2022

  • CVE-2022-30534
    57Planlayın

    An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364

    YüksekCVSS 8,8İstismar yokEPSS %75

    wwbn · avideo22 Ağu 2022

  • CVE-2022-30690
    49Planlayın

    A cross-site scripting (xss) vulnerability exists in the image403 functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

    OrtaCVSS 6,1İstismar yokEPSS %84

    wwbn · avideo22 Ağu 2022

  • CVE-2024-31819
    44Planlayın

    An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the sub

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    wwbn · avideo10 Nis 2024

  • CVE-2026-33478
    43Planlayın

    AVideo Multi-Chain Attack: Unauthenticated Remote Code Execution via Clone Key Disclosure, Database Dump, and Command Injection

    KritikCVSS 10,0Kavram kanıtıEPSS %11

    wwbn · avideo23 Mar 2026

  • CVE-2022-32572
    42Planlayın

    An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

    YüksekCVSS 8,8İstismar yokEPSS %24

    wwbn · avideo22 Ağu 2022

  • CVE-2026-29058
    41Planlayın

    AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

    KritikCVSS 9,8SilahlaştırılmışEPSS %7

    wwbn · avideo-encoder6 Mar 2026

  • CVE-2026-40911
    40Planlayın

    WWBN AVideo YPTSocket WebSocket Broadcast Relay Leads to Unauthenticated Cross-User JavaScript Execution via Client-Side eval() Sinks

    KritikCVSS 10,0İstismar yokEPSS %1

    wwbn · avideo21 Nis 2026

  • CVE-2022-26842
    39İzleyin

    A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master com

    KritikCVSS 9,6İstismar yokEPSS %4

    wwbn · avideo22 Ağu 2022

  • CVE-2026-28501
    39İzleyin

    WWBN AVideo: Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php

    KritikCVSS 9,8SilahlaştırılmışEPSS %1

    wwbn · avideo6 Mar 2026

  • CVE-2023-25313
    39İzleyin

    OS injection vulnerability in World Wide Broadcast Network AVideo version before 12.4, allows attackers to execute arbitrary code via the vi

    KritikCVSS 9,8İstismar yokEPSS %1

    wwbn · avideo25 Nis 2023

  • CVE-2025-48732
    39İzleyin

    An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff.

    KritikCVSS 9,8İstismar yokEPSS %1

    wwbn · avideo24 Tem 2025

  • CVE-2023-47862
    39İzleyin

    A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb.

    KritikCVSS 9,8İstismar yokEPSS %1

    wwbn · avideo10 Oca 2024

  • CVE-2023-49599
    39İzleyin

    An insufficient entropy vulnerability exists in the salt generation functionality of WWBN AVideo dev master commit 15fed957fb.

    KritikCVSS 9,8İstismar yokEPSS %1

    wwbn · avideo10 Oca 2024

  • CVE-2026-29093
    39İzleyin

    WWBN AVideo: Unauthenticated PHP session store exposed to host network via published memcached port

    KritikCVSS 9,8İstismar yokEPSS %1

    wwbn · avideo6 Mar 2026

  • CVE-2026-33352
    39İzleyin

    AVideo has an Unauthenticated SQL Injection via `doNotShowCats` Parameter (Backslash Escape Bypass)

    KritikCVSS 9,8İstismar yokEPSS %1

    wwbn · avideo23 Mar 2026

  • CVE-2025-41420
    38İzleyin

    A cross-site scripting (xss) vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master comm

    KritikCVSS 9,6İstismar yokEPSS %1

    wwbn · avideo24 Tem 2025

  • CVE-2025-36548
    38İzleyin

    A cross-site scripting (xss) vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and

    KritikCVSS 9,6İstismar yokEPSS %1

    wwbn · avideo24 Tem 2025

  • CVE-2023-32073
    37İzleyin

    AVideo command injection vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %6

    wwbn · avideo12 May 2023

  • CVE-2023-30854
    37İzleyin

    WWBN AVideo vulnerable to OS Command Injection

    YüksekCVSS 8,8Kavram kanıtıEPSS %5

    wwbn · avideo28 Nis 2023

  • CVE-2022-28712
    37İzleyin

    A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364.

    KritikCVSS 9,0İstismar yokEPSS %3

    wwbn · avideo22 Ağu 2022

  • CVE-2026-28502
    37İzleyin

    WWBN AVideo: Authenticated Remote Code Execution via Unsafe Plugin ZIP Extraction

    KritikCVSS 9,3İstismar yokEPSS %1

    wwbn · avideo6 Mar 2026

  • CVE-2026-33716
    37İzleyin

    AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php

    KritikCVSS 9,4İstismar yokEPSS %1

    wwbn · avideo23 Mar 2026

  • CVE-2026-33024
    37İzleyin

    AVideo-Encoder has Unauthenticated Blind Server-Side Request Forgery via Public Thumbnail Generator

    KritikCVSS 9,3İstismar yokEPSS %1

    wwbn · avideo-encoder20 Mar 2026

  • CVE-2026-41064
    37İzleyin

    AVideo has an incomplete fix for CVE-2026-33502 (Command Injection)

    KritikCVSS 9,3İstismar yokEPSS %0

    wwbn · avideo21 Nis 2026