Vulnerabilidades em WWBN

340 resultados
Análise Vexday

O portfólio de vulnerabilidades do WWBN reúne 187 CVEs catalogadas, com 30 classificadas como críticas e 67 surgidas apenas nos últimos 90 dias — volume recente que indica aceleração no ritmo de descoberta e demanda atenção contínua ao ciclo de atualização. Embora nenhuma CVE esteja no catálogo KEV da CISA, situando a taxa de exploração ativa abaixo da média geral do catálogo, o CVE-2022-30690 apresenta EPSS de 0,8358, sinalizando alta probabilidade estimada de exploração e devendo ser tratado com prioridade. A falha mais recorrente é CWE-79 (Cross-Site Scripting), categoria que, combinada com a existência de ao menos uma prova de conceito pública, amplia a superfície de risco para ambientes que ainda não aplicaram as correções disponíveis.

CVE-2026-114633HIGHWWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.phpEPSS 0.4%CVE-2026-88876HIGHAVideo PlayerSkins seo.php Missing Authorization Password-Protected VODEPSS 0.4%CVE-2026-92577HIGHAVideo through 29.0 API get_api_video Broken Access Control via clean_titleEPSS 0.4%CVE-2026-84476HIGHWWBN AVideo Authentication Bypass via X-Real-IP HeaderEPSS 0.4%CVE-2026-86188MEDIUMAVideo YPTSocket Plugin Unauthenticated Cross-Site ScriptingEPSS 0.4%CVE-2026-30885MEDIUMWWBN AVideo - Unauthenticated IDOR - Playlist Information DisclosureEPSS 0.4%CVE-2026-39369HIGHWWBN AVideo's GIF poster fetch bypasses traversal scrubbing and exposes local files through public media URLsEPSS 0.4%CVE-2026-92915MEDIUMWWBN AVideo userVerifyEmail.php Unauthenticated Access ControlEPSS 0.4%CVE-2026-33025HIGHAVideo-Encoder is Vulnerable to Authenticated SQL Injection via ORDER BY ClauseEPSS 0.4%CVE-2026-59808HIGHAVideo Authentication Bypass via Unkeyed Video Hash DisclosureEPSS 0.4%CVE-2026-90547MEDIUMWWBN AVideo Missing Authorization via getBookmarks.json.phpEPSS 0.4%CVE-2026-33717HIGHAVideo Vulnerable to Remote Code Execution via Persistent PHP Temp File in Encoder downloadURL with Resolution Validation AbortEPSS 0.4%CVE-2026-90539MEDIUMWWBN AVideo Missing Authentication via menuItems.json.phpEPSS 0.4%CVE-2026-90536MEDIUMWWBN AVideo Missing Authorization via adsInfo API EndpointEPSS 0.4%CVE-2026-90541MEDIUMWWBN AVideo Unauthenticated Information Disclosure via menus.json.phpEPSS 0.4%CVE-2026-90550MEDIUMWWBN AVideo Missing Authorization via mediaSession.json.phpEPSS 0.4%CVE-2026-49279HIGHWWBN AVideo: Stored XSS via autoEvalCodeOnHTML Bypass in MessageSQLite WebSocket Handler (CVE-2026-43874 Bypass)EPSS 0.4%CVE-2026-91966MEDIUMAVideo through 29.0 Unauthenticated SSRF via Host HeaderEPSS 0.4%CVE-2026-90551MEDIUMWWBN AVideo Missing Authorization via video_from_program APIEPSS 0.4%CVE-2026-33761MEDIUMAVideo: Unauthenticated Access to Scheduler Plugin Endpoints Leaks Scheduled Tasks, Email Content, and User MappingsEPSS 0.4%