Browse all 4 CVE security advisories affecting VideoFlow Ltd.. AI-powered Chinese analysis, POCs, and references for each vulnerability.
VideoFlow Ltd. develops video streaming and content management platforms for enterprises. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and access control flaws. The company has recorded four CVEs to date, with notable issues including authentication bypasses in their API endpoints and insecure direct object references in video delivery systems. While no major public security incidents have been documented, their vulnerability history suggests a pattern of weaknesses in web application security that could potentially lead to unauthorized access or content manipulation.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-25311 | VideoFlow Digital Video Protection DVP 10 Authenticated Directory Traversal 2.10 (X-Prototype-Version: 1.6.0.2) — VideoFlow Digital Video ProtectionCWE-22 | 6.5 | Medium | 2026-04-29 |
| CVE-2018-25310 | VideoFlow Digital Video Protection DVP 10 Authenticated Remote Code Execution — VideoFlow Digital Video ProtectionCWE-352 | 4.3 | Medium | 2026-04-29 |
| CVE-2019-25256 | VideoFlow Digital Video Protection DVP 2.10 Authenticated Directory Traversal — Digital Video Protection DVPCWE-22 | 6.5 | Medium | 2025-12-24 |
| CVE-2019-25255 | VideoFlow Digital Video Protection DVP 2.10 Authenticated Remote Code Execution — VideoFlow Digital Video Protection DVPCWE-78 | 4.3 | Medium | 2025-12-24 |
This page lists every published CVE security advisory associated with VideoFlow Ltd.. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.