Section
Vulnerabilities
CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.
16 matching records.
-
A vulnerability that could allow an attacker to compromise a system.
A vulnerability that could allow an attacker to compromise a system.
-
A vulnerability that could allow an attacker to gain unauthorized access.
A vulnerability that could allow an attacker to gain unauthorized access.
-
A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
-
A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
-
A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.
A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.
-
A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
-
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint.
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.
-
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution.
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can only be exploited after authenticating with an admin-privileged service account.
-
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to…
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper with audit log creation in AXIS Camera Station.
-
Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.
Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.
-
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework…
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of…
-
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation.
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. This flaw can only be exploited after authenticating with an admin-privileged service account.
-
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality.
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account.
-
The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to…
The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with…
-
A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended external content…
A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended external content under specific conditions.
-
Database backups are vulnerable to offline attacks.
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when…
Reuse this view
Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Axis+Communications&limit=100. RSS for this section: feed.xml.