WWBN vulnerabilities
We track 172 vulnerabilities in WWBN products across 2 products. 172 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
Latest WWBN vulnerabilities
- 8.8 High severity
AVideo: Improper Neutralization of Special Elements used in an SQL Command
A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulner
- 8.8 High severity
AVideo: Improper Neutralization of Special Elements used in an SQL Command
A sql injection vulnerability exists in the ObjectYPT functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.This vulner
- 7.5 High severity
AVideo: Incorrect Permission Assignment for Critical Resource
An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses
- 7.5 High severity
AVideo: Incorrect Permission Assignment for Critical Resource
An information disclosure vulnerability exists in the cookie functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. The session cookie and the pass cookie miss the HttpOnly flag, making them accessible via JavaScript. The session cookie also misses
- 8.8 High severity
AVideo: Improper Neutralization of Special Elements used in an OS Command
An os command injection vulnerability exists in the aVideoEncoder wget functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger t
- 8.8 High severity
AVideo: Improper Authentication
An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.
- 8.8 High severity
AVideo: Session Fixation
A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP
- 9.9 Critical severity
AVideo: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trigger this vu
- 8.8 High severity
AVideo: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability exists in the aVideoEncoder chunkfile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can send an HTTP request to trig
- 8.8 High severity
AVideo: Cross-Site Request Forgery
A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP request to trigger
- 9.0 Critical severity
AVideo: Improper Neutralization of Input During Web Page Generation
A cross-site scripting (xss) vulnerability exists in the videoAddNew functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authenticated user to sen
- 9.6 Critical severity
AVideo: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting (xss) vulnerability exists in the charts tab selection functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get an authen