CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,085 CVEs published, 233 critical, and 4 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,085
Show in the list
Critical, last 7 days
233
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product revive-adserver:revive_adserver. Show all products

19 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-50745Medium 4.7A missing sanitisation vulnerability exists with user input in the stats-video.php script.
Assigned by hackerone
Jun 25, 2026
CVE-2026-50740Medium 6.1A missing sanitisation vulnerability of user input in the zone-include.php script exists in Revive Adserver 6.0.7 and earlier.
Assigned by hackerone
Jun 25, 2026
CVE-2026-50742Medium 4.4A stored XSS vulnerabilities exists in the `maintenance-acl-check.php` and `maintenance-banners-check.php` tools of Revive Adserver 6.0.7.
Assigned by hackerone
Jun 25, 2026
CVE-2026-50741High 8.8Bypass to the fix for CVE-2026-34916.
Assigned by hackerone
Jun 25, 2026
CVE-2026-50739Medium 4.3A bypass for CVE‑2026‑34913 exists with proper ownership validation that had not been applied to the reverse operation of linking campaigns and trackers through the `tracker-campaigns.php` script in…
Assigned by hackerone
Jun 25, 2026
CVE-2026-50744Medium 4.3A bypass to the admin‑only restriction of the XML‑RPC API in Revive Adserver 6.0.7.
Assigned by hackerone
Jun 25, 2026
CVE-2023-53931Medium 6.1Revive Adserver 5.4.1 Cross-Site Scripting via Banner Advanced Settings
Assigned by VulnCheck
Dec 17, 2025
CVE-2025-52668High 8.7Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XS…
Assigned by hackerone
Nov 20, 2025
CVE-2025-48986High 8.8Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounts using the forgot…
Assigned by hackerone
Nov 20, 2025
CVE-2025-48987Medium 6.3Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.
Assigned by hackerone
Nov 20, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.