Vulnerabilidades em WWBN

340 resultados
Análise Vexday

O portfólio de vulnerabilidades do WWBN reúne 187 CVEs catalogadas, com 30 classificadas como críticas e 67 surgidas apenas nos últimos 90 dias — volume recente que indica aceleração no ritmo de descoberta e demanda atenção contínua ao ciclo de atualização. Embora nenhuma CVE esteja no catálogo KEV da CISA, situando a taxa de exploração ativa abaixo da média geral do catálogo, o CVE-2022-30690 apresenta EPSS de 0,8358, sinalizando alta probabilidade estimada de exploração e devendo ser tratado com prioridade. A falha mais recorrente é CWE-79 (Cross-Site Scripting), categoria que, combinada com a existência de ao menos uma prova de conceito pública, amplia a superfície de risco para ambientes que ainda não aplicaram as correções disponíveis.

CVE-2026-92913CRITICALAVideo Weak PRNG Activation Code Authentication BypassEPSS 0.5%CVE-2026-86727HIGHAVideo through 29.0 Information Disclosure via stats.json.phpEPSS 0.5%CVE-2026-33352CRITICALAVideo has an Unauthenticated SQL Injection via `doNotShowCats` Parameter (Backslash Escape Bypass)EPSS 0.5%CVE-2026-88869CRITICALAVideo AD_Server Stored XSS via log.php label parameterEPSS 0.5%CVE-2026-33293HIGHAVideo Affected by Arbitrary File Deletion via Path Traversal in CloneSite deleteDump ParameterEPSS 0.5%CVE-2026-61567CRITICALAVideo-Encoder: unauthenticated command execution through streamer login trustEPSS 0.5%CVE-2026-33038HIGHAVideo affected by unauthenticated application takeover via exposed web installer on uninitialized deploymentsEPSS 0.5%CVE-2026-33767HIGHAVideo has SQL Injection via Partial Prepared Statement — videos_id Concatenated Directly into QueryEPSS 0.5%CVE-2026-33681HIGHAVideo has Path Traversal in pluginRunDatabaseScript.json.php Enables Arbitrary SQL File Execution via Unsanitized Plugin NameEPSS 0.5%CVE-2026-84480CRITICALWWBN AVideo Password Recovery Token Expiration BypassEPSS 0.5%CVE-2026-84187HIGHAVideo on_publish.php Missing Authentication Check via RTMP CallbackEPSS 0.5%CVE-2026-116800MEDIUMWWBN AVideo before 29.5.0 Local PHP File Inclusion via Accept-Language HeaderEPSS 0.5%CVE-2026-89250HIGHWWBN AVideo Unauthenticated File Read via getRecordedFile.phpEPSS 0.5%CVE-2026-33770HIGHAVideo has SQL Injection in category.php fixCleanTitle() via Unparameterized clean_title and id VariablesEPSS 0.5%CVE-2026-89248MEDIUMAVideo WebRTC Plugin Information Disclosure via status.json.phpEPSS 0.5%CVE-2026-86721HIGHAVideo through c3edcc274c Authorization Bypass via Session CookieEPSS 0.5%CVE-2026-34731HIGHAVideo: Unauthenticated Live Stream Termination via RTMP Callback on_publish_done.phpEPSS 0.5%CVE-2026-33485HIGHAVideo has an Unauthenticated Blind SQL Injection in RTMP on_publish Callback via Stream Name ParameterEPSS 0.5%CVE-2026-86722HIGHAVideo Authentication Bypass via SQL Cache InvalidationEPSS 0.5%CVE-2026-92914HIGHAVideo LoginControl PGP Second Factor Authentication BypassEPSS 0.5%