Known Vulnerabilities for AVideo by WWBN
Listed below are 10 of the newest known vulnerabilities associated with "AVideo" by "WWBN".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-100630 json | AVideo contains a stored cross-site scripting vulnerability in the video trailer1 field rendered unsanitized within an inline... | Not Provided | 2026-09-26 | 2026-09-30 |
| CVE-2026-92915 json | WWBN AVideo through commit e01e41ecc (no patched version available) contains a broken access control flaw in objects/userVeri... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-92914 json | AVideo LoginControl contains an authentication bypass vulnerability in the PGP second factor verification that compares chall... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-92913 json | AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 uses a cryptographically weak pseudo-random number generator w... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-92912 json | AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 uses cryptographically weak uniqid() values for RTMP publish keys in ... | Not Provided | 2026-09-17 | 2026-09-19 |
| CVE-2026-92586 json | AVideo through 29.0 (commit c3edcc274c389816d434acadac07ee78eaf330c1) fails to verify video access permissions in the set_api... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92585 json | AVideo through 29.0 (commit c3edcc274c389816d434acadac07ee78eaf330c1) fails to validate video access permissions in the API l... | Not Provided | 2026-09-16 | 2026-09-19 |
| CVE-2026-92584 json | AVideo through 29.0 (current revision e01e41ecc) contains a stored cross-site scripting vulnerability. The unauthenticated vi... | Not Provided | 2026-09-16 | 2026-09-21 |
| CVE-2026-92583 json | AVideo through 29.0 contains a race condition in the enforceRateLimit() function that fails to atomically increment rate limi... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92582 json | AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site request forgery. objects/videoAddNew.json.ph... | Not Provided | 2026-09-16 | 2026-09-17 |