InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,500 CVEs published, 358 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,500
Show in the list
Critical, last 7 days
358
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list
Clear

Showing CVEs that name the product wwbn:avideo. Show all products

262 CVEs, showing 51 to 100PreviousPage 2 of 6Next
CVESeverityTitlePublished
CVE-2026-89244Medium 6.1WWBN AVideo Reflected XSS via Gallery Category getBackURL
Assigned by VulnCheck
Sep 11, 2026
CVE-2026-89243High 8.1WWBN AVideo Stored XSS via UserGroups setGroup_name
Assigned by VulnCheck
Sep 11, 2026
CVE-2026-89242High 7.2WWBN AVideo Unauthenticated SSRF via login.json.php
Assigned by VulnCheck
Sep 11, 2026
CVE-2026-89241Medium 6.1WWBN AVideo Reflected XSS via confirmLivePassword.php
Assigned by VulnCheck
Sep 11, 2026
CVE-2026-89240Medium 6.1WWBN AVideo Reflected XSS via confirmLivePassword.php
Assigned by VulnCheck
Sep 11, 2026
CVE-2026-89239Medium 6.1WWBN AVideo Reflected XSS via Referer Header Comment Breakout
Assigned by VulnCheck
Sep 11, 2026
CVE-2026-89148Medium 5.4AVideo Open Redirect via playlistSort.php Referer Header
Assigned by VulnCheck
Sep 11, 2026
CVE-2026-88876High 7.5AVideo PlayerSkins seo.php Missing Authorization Password-Protected VOD
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88875Medium 4.3AVideo Incomplete API Sanitization Information Disclosure
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88874High 7.5AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 Authentication Bypass
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88873High 7.1WWBN AVideo Cross-Site Request Forgery via logArchive.json.php
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88872High 7.1AVideo CustomizeUser setPassword.json.php CSRF
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88871Medium 4.3WWBN AVideo CustomizeUser setSubscribers CSRF via GET
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88870High 7.1WWBN AVideo LoginControl PGP Key CSRF via GET Request
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88869Critical 9.3AVideo AD_Server Stored XSS via log.php label parameter
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88868High 8.7AVideo LiveLinks Stored XSS via title and description fields
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88867High 8.7WWBN AVideo Stored XSS via Category Name and Icon Class
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88866High 8.7WWBN AVideo LoginControl Stored XSS via User-Agent Header
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-88865High 8.1AVideo Missing Authorization via getRestream.json.php
Assigned by VulnCheck
Sep 10, 2026
CVE-2026-86729High 7.4WWBN AVideo Unrestricted Authentication Attempts via get_api_preauthorize
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86728High 7.5AVideo through 29.0 Unauthenticated Disclosure via epg.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86727High 7.5AVideo through 29.0 Information Disclosure via stats.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86726Medium 6.5AVideo through 29.0 Information Disclosure via restreamsActive.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86725High 7.1AVideo SocialMediaPublisher Missing Authorization via add.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86724Medium 6.5AVideo YPTWallet saveBalance.php Cross-Site Request Forgery
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86723High 8.1AVideo LoginControl PGP Authentication Bypass via verifyChallenge
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86722High 8.1AVideo Authentication Bypass via SQL Cache Invalidation
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86721High 7.5AVideo through c3edcc274c Authorization Bypass via Session Cookie
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86720High 8.1WWBN AVideo Missing Authorization via resendRestreamer.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86719Medium 5.4WWBN AVideo CustomizeUser Cross-Site Request Forgery Session Hijacking
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86718High 7.1WWBN AVideo Cross-Site Request Forgery via deleteHistory.json.php
Assigned by VulnCheck
Sep 8, 2026
CVE-2026-86190Critical 9.1WWBN AVideo Broken Access Control via videoViewsInfo hash Parameter
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86189Critical 9.8WWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86188High 7.2AVideo YPTSocket Plugin Unauthenticated Cross-Site Scripting
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86187Medium 5.9WWBN AVideo Weak PRNG Password Generation via External Login
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-86186Medium 6.5AVideo API Rate Limit Bypass via Bot User-Agent Header
Assigned by VulnCheck
Sep 5, 2026
CVE-2026-85577Medium 5.4AVideo userLogin.php Reflected XSS via error parameter
Assigned by VulnCheck
Sep 4, 2026
CVE-2026-85164High 7.1WWBN AVideo Server-Side Request Forgery via set_api_userImages
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85163Medium 6.5AVideo Server-Side Request Forgery via epg_link parameter
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85162Medium 6.5AVideo through c91b5975d CSRF via saveLive.php
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85161Medium 4.3AVideo removePoster.php Cross-Site Request Forgery File Deletion
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85160High 8.1AVideo through c91b5975d CSRF and Path Traversal via stopLive.php
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85159Medium 5.4AVideo Reflected XSS via cancelUri in userLogin.php
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85158Medium 5.4AVideo Reflected XSS via videoEmbeded.php link parameter
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85157Medium 5.3WWBN AVideo Broken Access Control via feed/index.php program_id
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85156Medium 5.3WWBN AVideo Broken Access Control via Channel Page
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85155High 7.5WWBN AVideo SQL Injection via get.json.php APIName channels
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-85154Critical 9.8WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash
Assigned by VulnCheck
Sep 3, 2026
CVE-2026-84483Medium 5.3WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php
Assigned by VulnCheck
Sep 1, 2026
CVE-2026-84482High 8.8WWBN AVideo Cross-Site Request Forgery via get_domain() validation
Assigned by VulnCheck
Sep 1, 2026
PreviousPage 2 of 6Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.