Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 160
Reset filtersAVideo has Unauthenticated SQL Injection via JSON Request Bypass in objects/videos.json.php
AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php
AVideo has Stored Cross-Site Scripting via Markdown Comment Injection
AVideo cross-site scripting vulnerability in the view/about.php page
WWBN AVideo Remote Code Execution
WWBN AVideo recovery notification bypass vulnerability
WWBN AVideo Insufficient Entropy vulnerbaility
WWBN AVideo Improper Restriction of Excessive Authentication Attempts vulnerability
WWBN AVideo command injection vulnerability
WWBN/AVideo stored XSS vulnerability leads to takeover of any user's account, including admin's account
Remote code injection in wwbn/avideo
Cross site scripting (XSS) in wwbn/avideo
AVideo contains Command injection when embedding a video link
AVideo vulnerable to Improper Privilege Management
Open redirect in wwbn/avideo
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.