AV
Vendor
AVideo
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-60092 | AV AVideo AVideo | 6.1 | Jul 8 | AVideo - Stored Cross-Site Scripting via Unescaped User-Agent in Participants Panel |
| CVE-2026-56346 | AV AVideo AVideo | 6.5 | Jun 20 | AVideo - Unauthenticated PGP Message Decryption via decryptMessage.json.php Endpoint |
| CVE-2026-56345 | AV AVideo AVideo | 8.1 | Jun 20 | AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint |
| CVE-2026-56342 | AV AVideo AVideo | 6.8 | Jun 20 | AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter |
| CVE-2026-56341 | AV AVideo AVideo | 7.5 | Jun 20 | AVideo - Unauthenticated Access to Payment Log DataTables Endpoints via list.json.php |
| CVE-2020-37158 | AP AVideo Platform AVideo | 8.8 | Feb 11 | AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset) |
| CVE-2020-37173 | AP AVideo Platform AVideo | 7.5 | Feb 11 | AVideo Platform 8.1 - Information Disclosure (User Enumeration) |
| CVE-2020-37172 | AP AVideo Platform AVideo | 9.8 | Feb 11 | AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset) |