AVideo vulnerabilities

164 known vulnerabilities in AVideo from WWBN. 164 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  AVideo: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-30534Aug 22, 2022WWBNEPSS 75.6%

  An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trig

• 8.8 High severity

  AVideo: Cross-Site Request Forgery

  CVE-2022-29468Aug 22, 2022WWBNEPSS 1.7%

  A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP request to trigger

• 9.0 Critical severity

  AVideo: Improper Neutralization of Input During Web Page Generation

  CVE-2022-28712Aug 22, 2022WWBNEPSS 3.25%

  A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to sen

• 9.6 Critical severity

  AVideo: Improper Neutralization of Input During Web Page Generation

  CVE-2022-26842Aug 22, 2022WWBNEPSS 3.93%

  A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authen