Known Vulnerabilities for products from Revive-adserver
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Revive-adserver".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-50745 json | A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were c... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-50744 json | A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login met... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-50742 json | A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Ad... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-50741 json | Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can b... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-50740 json | A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier... | Not Provided | 2026-06-26 | 2026-07-08 |
| CVE-2026-50739 json | Not Provided | 2026-06-26 | 2026-06-26 | |
| CVE-2026-44959 json | Not Provided | 2026-06-23 | 2026-06-23 | |
| CVE-2026-44958 json | Not Provided | 2026-06-23 | 2026-06-23 | |
| CVE-2026-44957 json | Not Provided | 2026-06-23 | 2026-06-23 | |
| CVE-2026-34916 json | Not Provided | 2026-06-23 | 2026-06-23 | |
| CVE-2026-34915 json | Not Provided | 2026-06-23 | 2026-06-23 | |
| CVE-2026-34914 json | Not Provided | 2026-06-23 | 2026-06-23 | |
| CVE-2023-38040 json | A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions.. | 6.1 - MEDIUM | 2023-09-17 | 2023-09-20 |
| CVE-2021-22948 json | Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() P... | 7.1 - HIGH | 2021-09-23 | 2023-06-30 |
| CVE-2021-22889 json | Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (... | 6.1 - MEDIUM | 2021-03-25 | 2021-03-27 |
| CVE-2021-22888 json | Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-zones... | 6.1 - MEDIUM | 2021-03-25 | 2021-03-27 |
| CVE-2021-22875 json | Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage` parameter. | 6.1 - MEDIUM | 2021-01-28 | 2021-01-29 |
| CVE-2021-22874 json | Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` para... | 6.1 - MEDIUM | 2021-01-28 | 2021-01-29 |
| CVE-2021-22873 json | Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php ... | 6.1 - MEDIUM | 2021-01-26 | 2021-02-02 |
| CVE-2021-22872 json | Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly accessibl... | 6.1 - MEDIUM | 2021-01-26 | 2021-02-02 |
Known software with vulnerabilities from Revive-adserver
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Revive-adserver | Revive Adserver | - |