Revive Adserver
Approved changes feed: RSS · Atom
cpe:2.3:a:revive:revive_adserver:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Revive (79fbdab7-1294-57ee-b28a-efd7ff0dfd89) |
|---|---|
| Product | Revive Adserver (9aee69f8-f3fc-5d3c-82b4-ba60454b6569) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-21664 |
vulnerable | 2026-06-08 07:49:16.676902 |
Details available
MEDIUM (6.1)
HackerOne community member Huynh Pham Thanh Luc (nigh7c0r3) has reported a reflected XSS vulnerability in the afr.php delivery script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser and malicious scripts would be executed.
Published: 2026-01-20T20:48:47.976Z
Updated: 2026-01-21T20:45:35.234Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21663 |
vulnerable | 2026-06-08 07:49:16.676646 |
Details available
MEDIUM (6.1)
HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the banner-acl.php script of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser and malicious scripts would be executed.
Published: 2026-01-20T20:48:47.974Z
Updated: 2026-01-21T20:42:21.072Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21642 |
vulnerable | 2026-06-08 07:49:16.665603 |
Details available
MEDIUM (6.1)
HackerOne community member Patrick Lang (7yr) has reported a reflected XSS vulnerability in the `banner-acl.php` and `channel-acl.php` scripts of Revive Adserver. An attacker can craft a specific URL that includes an HTML payload in a parameter. If a logged in administrator visits the URL, the HTML is sent to the browser and malicious scripts would be executed.
Published: 2026-01-20T20:48:48.079Z
Updated: 2026-01-21T20:47:21.691Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21641 |
vulnerable | 2026-06-08 07:49:16.665220 |
Details available
HIGH (7.1)
HackerOne community member Jad Ghamloush (0xjad) has reported an authorization bypass vulnerability in the `tracker-delete.php` script of Revive Adserver. Users with permissions to delete trackers are mistakenly allowed to delete trackers owned by other accounts.
Published: 2026-01-20T20:48:47.885Z
Updated: 2026-01-21T18:52:48.506Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-21640 |
vulnerable | 2026-06-08 07:49:16.660814 |
Details available
LOW (2.7)
HackerOne community member Faraz Ahmed (PakCyberbot) has reported a format string injection in the Revive Adserver settings. When specific character combinations are used in a setting, the admin user console could be disabled due to a fatal PHP error.
Published: 2026-01-20T20:48:47.940Z
Updated: 2026-01-21T18:52:43.635Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55129 |
not_vulnerable | 2026-06-08 07:33:14.094620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55128 |
vulnerable | 2026-06-08 07:33:14.094224 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55127 |
vulnerable | 2026-06-08 07:33:14.093928 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55126 |
vulnerable | 2026-06-08 07:33:14.092228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55124 |
vulnerable | 2026-06-08 07:33:14.088805 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-55123 |
vulnerable | 2026-06-08 07:33:14.087572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52671 |
vulnerable | 2026-06-08 07:31:12.845784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52670 |
vulnerable | 2026-06-08 07:31:12.845422 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52669 |
vulnerable | 2026-06-08 07:31:12.845150 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52668 |
vulnerable | 2026-06-08 07:31:12.844784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52667 |
vulnerable | 2026-06-08 07:31:12.844286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52666 |
vulnerable | 2026-06-08 07:31:12.842618 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52664 |
vulnerable | 2026-06-08 07:31:12.833558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48987 |
vulnerable | 2026-06-08 07:29:12.379624 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48986 |
vulnerable | 2026-06-08 07:29:12.377441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27208 |
vulnerable | 2026-06-08 07:14:54.507354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38040 |
vulnerable | 2026-06-08 06:08:16.801459 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5440 |
vulnerable | 2026-06-08 05:13:59.138627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.