AXIS OS 安全漏洞

AXIS OS is an edge device operating system from the Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from a competitive condition that could block web interface access...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Axis Sweden. AXIS OS has a security vulnerability that stems from an incorrect user privilege level...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from Swedish company Axis AXIS. AXIS OS has a security vulnerability that stems from insufficient input validation, which could lead to memory exhaustion...

AXIS OS 安全漏洞

AXIS OS is an edge device operating system from the Swedish company Axis AXIS. AXIS OS has a security vulnerability that originates from allowing access to restricted D-Bus methods...

AXIS OS 代码问题漏洞

AXIS OS is an edge device operating system from Swedish company Axis AXIS. AXIS OS suffers from a security vulnerability that stems from insufficient input validation, which could lead to command injection and resource exhaustion...

PT-2025-9625

Name of the Vulnerable Software and Affected Versions AXIS OS affected versions not specified Description The VAPIX API dynamicoverlay.cgi endpoint did not have sufficient input validation, allowing for a possible command injection. This could lead to transferring files to the Axis device,...

Linux Distros Unpatched Vulnerability : CVE-2014-3596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name CN or...

PT-2025-9631

Name of the Vulnerable Software and Affected Versions Axis Communication VAPIX affected versions not specified Description A flaw was discovered in the VAPIX Device Configuration framework, potentially leading to an incorrect user privilege level in the VAPIX service account D-Bus API...

PT-2025-9630

Name of the Vulnerable Software and Affected Versions Axis OS affected versions not specified Description A flaw was discovered in the ACAP Application framework, allowing applications to access restricted D-Bus methods within the framework. The issue was found during a penetration test conducted...

PT-2025-9628

Name of the Vulnerable Software and Affected Versions Axis device versions affected versions not specified Description A race condition attack was discovered in the VAPIX API param.cgi endpoint, allowing an attacker to block access to the web interface of the Axis device. Other API endpoints or...

PT-2025-9626

Name of the Vulnerable Software and Affected Versions AXIS OS affected versions not specified Description The VAPIX API mediaclip.cgi endpoint did not have sufficient input validation, allowing for the uploading of more audio clips than designed, which could result in the Axis device running out ...

CVE-2025-0360: Incorrect Authorization

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API...

CVE-2025-0359: Incorrect Authorization

During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access restricted D-Bus methods within the framework. Axis has released patched AXIS OS versions for the highlighted flaw. Please...

CVE-2024-47262: Improper Validation of Specified Type of Input

Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API param.cgi was vulnerable to a race condition attack allowing for an attacker to block access to the web interface of the Axis device. Other API endpoints or services not making use of param.cgi are not...

CVE-2024-47260: Improper Restriction of Names for Files and Other Resources

51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did not have a sufficient input validation allowing for uploading more audio clips then designed resulting in the Axis device running out of memory. Axis has released patched AXIS OS versions for the...

Linux Distros Unpatched Vulnerability : CVE-2019-0227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Server Side Request Forgery SSRF vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits...

Linux Distros Unpatched Vulnerability : CVE-2018-8032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting XSS attack in the default servlet/services. CVE-2018-8032 Note that Nessus relie...

CVE-2022-21726

Tensorflow is an Open Source Machine Learning Framework. The implementation of Dequantize does not fully validate the value of axis and can result in heap OOB accesses. The axis argument can be -1 the default value for the optional argument or any other positive value at most the number of...

CVE-2024-47257

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network. Axis has released patched AXIS OS versions for the highlighted flaw for products that are still under AXIS OS software...

Cacti Graph Template authenticated RCE versions prior to 1.2.29

This module exploits an authenticated remote code execution vulnerability in Cacti versions prior to 1.2.29. Authenticated users can upload a graph template through the /graphtemplates.php endpoint. The rightaxislabel parameter is vulnerable to code injection, allowing attackers to execute...