EUVD-2025-24222

Malicious code in bioql PyPI...

The vulnerability of the AXIS Camera Station Pro software management software lies in the improper assignment of permissions for critical resources. This allows a intruder to gain access to delete any files they desire and to cause service failure.

The vulnerability of the AXIS Camera Station Pro software for video management is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability could allow an attacker to gain access to delete arbitrary files and cause service failures...

The vulnerability of the surveillance and recording system servers for AXIS Camera Station and Camera Station Pro, as well as the AXIS Device Manager software for device management, is related to a lack of deserialization mechanisms. This allows attackers to execute arbitrary code.

The vulnerability of the surveillance and recording server systems for AXIS Camera Station and Camera Station Pro, as well as the AXIS Device Manager software for device management, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor...

Unspecified Vulnerability in AXIS BANK Axis Mobile App

AXIS BANK Axis Mobile App is a mobile banking application by AXIS BANK India. AXIS BANK Axis Mobile App version 9.9 has a security vulnerability that can be exploited by an attacker that may lead to the disclosure of account information, balances, transaction history and other data...

CVE-2025-56467

An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, transaction history, and unspecified other information. NOTE: the Supplier's perspective is that this is an intended...

CVE-2025-56467

An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, transaction history, and unspecified other information. NOTE: the Supplier's perspective is that this is an intended...

CVE-2025-56467

An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, transaction history, and unspecified other information. NOTE: the Supplier's perspective is that this is an intended...

CVE-2025-56467

The AXIS BANK LIMITED Axis Mobile App version 9.9 contains a security vulnerability that allows attackers to obtain sensitive information without a UPI PIN . This exposure includes account information , balances , transaction history , and other unspecified data. While the supplier claims this is...

PT-2025-37337

Name of the Vulnerable Software and Affected Versions: AXIS BANK LIMITED Axis Mobile App version 9.9 Description: An issue was discovered that allows attackers to gain sensitive information without a UPI PIN, including account information, balances, transaction history, and other unspecified...

CVE-2025-56467

An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, transaction history, and unspecified other information. NOTE: the Supplier's perspective is that this is an intended...

AXIS BANK Axis Mobile App 安全漏洞

AXIS BANK Axis Mobile App is a mobile banking application by AXIS BANK India. AXIS BANK Axis Mobile App version 9.9 has a security vulnerability that can be exploited by an attacker that may lead to the disclosure of account information, balances, transaction history and other data...

CVE-2025-56467: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in AXIS BANK LIMITED Axis Mobile App 9.9 that allows attackers to obtain sensitive information without a UPI PIN, such as account information, balances, transaction history, and unspecified other information. NOTE: the Supplier's perspective is that this is an intended...

Linux Distros Unpatched Vulnerability : CVE-2017-9765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the soapget function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2007-2353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the...

Axis Communications Autodesk Plugin AzureBlobRestAPI axiscontentfiles Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Axis Communications Autodesk Plugin. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of a cloud resource. The issue results from allowi...

Linux Distros Unpatched Vulnerability : CVE-2023-51441

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UNSUPPORTED WHEN ASSIGNED Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF This...

CVE-2025-30027

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...

CVE-2025-3892

ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

CVE-2025-3892

ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...

CVE-2025-3892

ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...