Skip to content

Vendor

avid vulnerabilities

5 published CVES affecting avid, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
5
Critical
0
High
5
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of avid alerts

Products

Latest avid CVEs

Newest publication first

  1. CVE-2024-26293 Unauthenticated Path Traversal affecting Avid NEXIS

    Published
    HighCVSS 8.7

    The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025....

  2. CVE-2024-26292 Authenticated Arbitrary File Deletion affecting Avid NEXIS

    Published
    HighCVSS 7.1

    An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.

  3. CVE-2024-26291 Authenticated Arbitrary File Read affecting Avid NEXIS

    Published
    HighCVSS 8.7

    An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHORITY SYSTEM) by defa...

  4. CVE-2024-26290 Authenticated Remote Command Injection affecting Avid NEXIS

    Published
    HighCVSS 8.7

    Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permissions.This issue aff...

  5. CVE-2011-5003 Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port....

    Published
    HighCVSS 10.0 EPSS 62.4% Framework module Public exploit

    Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.