Vulnerabilidades en WWBN
339 resultadosCVE-2026-90540MEDIUMWWBN AVideo Missing Authorization via playListAddVideo.json.phpEPSS 0.3%CVE-2026-92585MEDIUMAVideo through 29.0 Missing Authorization Check via API Like EndpointEPSS 0.3%CVE-2026-92586MEDIUMAVideo through 29.0 Missing Authorization via comment API endpointEPSS 0.3%CVE-2026-82646MEDIUMWWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.phpEPSS 0.3%CVE-2026-89244MEDIUMWWBN AVideo Reflected XSS via Gallery Category getBackURLEPSS 0.3%CVE-2026-89241MEDIUMWWBN AVideo Reflected XSS via confirmLivePassword.phpEPSS 0.3%CVE-2026-85158MEDIUMAVideo Reflected XSS via videoEmbeded.php link parameterEPSS 0.3%CVE-2026-92584MEDIUMAVideo through 29.0 Stored Cross-Site Scripting via User-Agent HeaderEPSS 0.3%CVE-2026-89239MEDIUMWWBN AVideo Reflected XSS via Referer Header Comment BreakoutEPSS 0.3%CVE-2026-33488HIGHAVideo has a PGP 2FA Bypass via Cryptographically Broken 512-bit RSA Key Generation in LoginControl PluginEPSS 0.3%CVE-2026-33354HIGHAVideo has an authenticated arbitrary local file read via `chunkFile` path injection in `aVideoEncoder.json.php`EPSS 0.3%CVE-2026-61572HIGHAVideo-Encoder: unauthenticated full-response server-side request forgeryEPSS 0.3%CVE-2026-34245MEDIUMAVideo's Missing Authorization in Playlist Schedule Creation Allows Cross-User Broadcast HijackingEPSS 0.3%CVE-2026-43878MEDIUMWWBN AVideo: Reflected XSS in plugin/Meet/iframe.php via Unescaped `user`/`pass` Parameters Reflected into JavaScript String LiteralEPSS 0.3%CVE-2026-34362MEDIUMAVideo's WebSocket Token Never Expires Due to Commented-Out Timeout Validation in verifyTokenSocket()EPSS 0.3%CVE-2026-61573MEDIUMAVideo-Encoder: reflected cross-site scripting in the login interfaceEPSS 0.3%CVE-2026-40908MEDIUMWWBN AVideo has an Unauthenticated Information Disclosure via git.json.php that Exposes Developer Emails and Deployed VersionEPSS 0.3%CVE-2026-114634MEDIUMWWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL RedirectEPSS 0.2%CVE-2026-34247MEDIUMAVideo's IDOR in uploadPoster.php Allows Any Authenticated User to Overwrite Scheduled Live Stream Posters and Trigger False Socket NotificationsEPSS 0.2%CVE-2026-33684MEDIUMAVideo's Privilege AVideo: Escalation via Unguarded Permission Parameters in signUp API Allows Self-Granting Upload/Stream/Meet PermissionsEPSS 0.2%