InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,499 CVEs published, 356 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,499
Show in the list
Critical, last 7 days
356
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product wwbn:avideo. Show all products

262 CVEs, showing 151 to 200PreviousPage 4 of 6Next
CVESeverityTitlePublished
CVE-2026-82646Medium 6.1WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.php
Assigned by VulnCheck
Aug 30, 2026
CVE-2026-82647Medium 6.1WWBN AVideo Cross-Site Request Forgery via sendEmail.json.php
Assigned by VulnCheck
Aug 30, 2026
CVE-2026-82648High 7.1WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address
Assigned by VulnCheck
Aug 30, 2026
CVE-2026-83595High 8.1AVideo Cross-Site Request Forgery via plugin/API/set.json.php
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84187High 8.2AVideo on_publish.php Missing Authentication Check via RTMP Callback
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84208High 7.5AVideo User_Location Plugin Unauthenticated SQL Injection
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84476High 7.5WWBN AVideo Authentication Bypass via X-Real-IP Header
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84477Medium 5.4AVideo Stored XSS via Live Schedule Title Description
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84478High 7.3WWBN AVideo Unauthenticated Arbitrary Log File Deletion
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84479Critical 9.1WWBN AVideo Authentication Bypass via User-Agent Header
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84480Critical 9.8WWBN AVideo Password Recovery Token Expiration Bypass
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84481Medium 6.9WWBN AVideo through 30.0 Information Disclosure via MobileManager
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84482High 8.8WWBN AVideo Cross-Site Request Forgery via get_domain() validation
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84483Medium 5.3WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-85154Critical 9.8WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85155High 7.5WWBN AVideo SQL Injection via get.json.php APIName channels
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85156Medium 5.3WWBN AVideo Broken Access Control via Channel Page
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85157Medium 5.3WWBN AVideo Broken Access Control via feed/index.php program_id
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85158Medium 5.4AVideo Reflected XSS via videoEmbeded.php link parameter
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85159Medium 5.4AVideo Reflected XSS via cancelUri in userLogin.php
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85160High 8.1AVideo through c91b5975d CSRF and Path Traversal via stopLive.php
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85161Medium 4.3AVideo removePoster.php Cross-Site Request Forgery File Deletion
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85162Medium 6.5AVideo through c91b5975d CSRF via saveLive.php
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85163Medium 6.5AVideo Server-Side Request Forgery via epg_link parameter
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85164High 7.1WWBN AVideo Server-Side Request Forgery via set_api_userImages
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85577Medium 5.4AVideo userLogin.php Reflected XSS via error parameter
Assigned by VulnCheck
Sep 4, 2026
CVE-2026-86186Medium 6.5AVideo API Rate Limit Bypass via Bot User-Agent Header
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86187Medium 5.9WWBN AVideo Weak PRNG Password Generation via External Login
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86188High 7.2AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86189Critical 9.8WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86190Critical 9.1WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86718High 7.1WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86719Medium 5.4WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86720High 8.1WWBN AVideo Missing Authorization via resendRestreamer.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86721High 7.5AVideo through c3edcc274c Authorization Bypass via Session Cookie
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86722High 8.1AVideo Authentication Bypass via SQL Cache Invalidation
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86723High 8.1AVideo LoginControl PGP Authentication Bypass via verifyChallenge
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86724Medium 6.5AVideo YPTWallet saveBalance.php Cross-Site Request Forgery
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86725High 7.1AVideo SocialMediaPublisher Missing Authorization via add.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86726Medium 6.5AVideo through 29.0 Information Disclosure via restreamsActive.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86727High 7.5AVideo through 29.0 Information Disclosure via stats.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86728High 7.5AVideo through 29.0 Unauthenticated Disclosure via epg.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86729High 7.4WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-88865High 8.1AVideo Missing Authorization via getRestream.json.php
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88866High 8.7WWBN AVideo LoginControl Stored XSS via User-Agent Header
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88867High 8.7WWBN AVideo Stored XSS via Category Name and Icon Class
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88868High 8.7AVideo LiveLinks Stored XSS via title and description fields
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88869Critical 9.3AVideo AD_Server Stored XSS via log.php label parameter
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88870High 7.1WWBN AVideo LoginControl PGP Key CSRF via GET Request
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88871Medium 4.3WWBN AVideo CustomizeUser setSubscribers CSRF via GET
Assigned by VulnCheck
Sep 10, 2026
PreviousPage 4 of 6Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.