EUVD-2023-25578

Malicious code in bioql PyPI...

EUVD-2023-25580

Malicious code in bioql PyPI...

CVE-2023-21412

User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections...

CVE-2023-21412

User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections...

CVE-2023-21410

User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution...

Sql injection

User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections...

CVE-2023-21412 Non-sanitized user input could lead to SQL injections in AXIS License Plate Verifier

User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections...

CVE-2023-21412 Non-sanitized user input could lead to SQL injections in AXIS License Plate Verifier

User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections...

CVE-2023-21412

CVE-2023-21412 affects AXIS License Plate Verifier’s search.cgi endpoint where user input is not sanitized, enabling SQL injection. This is referenced in NVD/Red Hat entries for the AXIS product, indicating potential unauthorized database access/manipulation with high impact to confidentiality, i...

CVE-2023-21411 Non-sanitized user input could lead to arbitrary code execution during Access Control configuration in AXIS License Plate Verifier

User provided input is not sanitized in the “Settings Access Control” configuration interface allowing for arbitrary code execution...

CVE-2023-21410 Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier

User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution...

CVE-2023-21410

CVE-2023-21410 affects the AXIS License Plate Verifier via the api.cgi endpoint, where user input is not sanitized, enabling arbitrary code execution. Public details (NVD) list a high-impact CVSSv3.1 score (base 8.8) with NETWORK attack vector, low attack complexity, and privileges required as lo...

CVE-2023-21407 Privilege escalation in AXIS License Plate Verifier ACAP

A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges...

CVE-2023-21407 Privilege escalation in AXIS License Plate Verifier ACAP

A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges...

CVE-2023-21410: Improper Neutralization of Special Elements used in an OS Command

User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution...

CVE-2023-21412: Improper Neutralization of Special Elements used in an SQL Command

User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections...

PT-2023-7486 · Axis · Axis License Plate Verifier

Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue concerns the "search.cgi" file in the AXIS License Plate Verifier, where user-provided input is not properly sanitized, allowing for SQL injections. This could...