Known Vulnerabilities for products from Revive-adserver
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Revive-adserver".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-50745 json | A missing sanitisation vulnerability exists with user input in the stats-video.php script. The way URLs to this script were c... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-50744 json | A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7. The API response for the ox.login met... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-50742 json | A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Ad... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-50741 json | Bypass to the fix for CVE-2026-34916. Variants of such vectors have been also reported by phucrio and offsetmd. The fix can b... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2026-50740 json | A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier... | Not Provided | 2026-06-26 | 2026-07-08 |
| CVE-2026-50739 json | A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2025-55124 json | Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script. | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-55123 json | Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able t... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-52671 json | Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-a... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-52670 json | Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete bann... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-52669 json | Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-adm... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-52668 json | Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions cau... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-52667 json | Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS atta... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-52666 json | Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-52664 json | SQL injection in Revive Adserver 6.0.0 causes potential disruption or information access when specifically crafted payloads a... | Not Provided | 2025-10-31 | 2026-10-07 |
| CVE-2025-48987 json | Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS att... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-48986 json | Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other use... | Not Provided | 2025-11-20 | 2026-09-26 |
| CVE-2025-27208 json | A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could ... | Not Provided | 2025-10-31 | 2026-10-07 |
| CVE-2023-38040 json | A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions.. | 6.1 - MEDIUM | 2023-09-17 | 2023-09-20 |
| CVE-2021-22948 json | Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() P... | 7.1 - HIGH | 2021-09-23 | 2023-06-30 |
Known software with vulnerabilities from Revive-adserver
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Revive-adserver | Revive Adserver | - |