CVE-2023-21411 Non-sanitized user input could lead to arbitrary code execution during Access Control configuration in AXIS License Plate Verifier

User provided input is not sanitized in the “Settings Access Control” configuration interface allowing for arbitrary code execution...

CVE-2023-21410 Non-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier

User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution...

CVE-2023-21410

CVE-2023-21410 affects the AXIS License Plate Verifier via the api.cgi endpoint, where user input is not sanitized, enabling arbitrary code execution. Public details (NVD) list a high-impact CVSSv3.1 score (base 8.8) with NETWORK attack vector, low attack complexity, and privileges required as lo...

CVE-2023-21407 Privilege escalation in AXIS License Plate Verifier ACAP

A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges...

CVE-2023-21407 Privilege escalation in AXIS License Plate Verifier ACAP

A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and prior versions, which...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. AXIS License Plate Verifier 2.8.3 and prior versions contain a security vulnerability that ste...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Ideal for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and prior versions that...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Suitable for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and prior versions,...

PT-2023-18181 · Axis Communications +1 · Axis License Plate Verifier +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient file permissions, which could allow unprivileged users to access unencrypted administrator credentials. This access...

PT-2023-18180 · Axis Communications +1 · Axis License Plate Verifier +1

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is due to insufficient file permissions, allowing unprivileged users to access unencrypted user credentials used in the integration interface towards 3rd party systems...

AXIS License Plate Verifier SQL Injection Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Suitable for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and earlier versions,...

AXIS License Plate Verifier Security Vulnerability

AXIS License Plate Verifier is a license plate verifier from AXIS Sweden. Suitable for free flow, low speed traffic and vehicle access control scenarios, it makes detecting and reading license plates easy. A security vulnerability exists in AXIS License Plate Verifier 2.8.3 and earlier versions,...

PT-2023-7486 · Axis · Axis License Plate Verifier

Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue concerns the "search.cgi" file in the AXIS License Plate Verifier, where user-provided input is not properly sanitized, allowing for SQL injections. This could...

PT-2023-7485 · Axis · Axis License Plate Verifier

Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue arises from insufficient input validation in the "api.cgi" file of the License Plate Verifier software, allowing for arbitrary code execution. This can be...

PT-2023-18179 · Axis · Axis License Plate Verifier

Name of the Vulnerable Software and Affected Versions: AXIS License Plate Verifier affected versions not specified Description: The issue concerns unsanitized user-provided input on the "search.cgi" endpoint, allowing for SQL injections. Recommendations: At the moment, there is no information abo...

Cross Site Scripting (XSS)

@udecode/plate-link is vulnerable to Cross Site Scripting XSS. The vulnerability exists because it does not properly validate url's, which allows an attacker to inject malicious JavaScript script into the system...

CVE-2023-34245

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...

CVE-2023-34245 Cross site scripting (XSS) in @udecode/plate-link

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...

CVE-2023-34245 Cross site scripting (XSS) in @udecode/plate-link

@udecode/plate-link is the link handler for the udecode/plate rich-text editor plugin system for Slate & React. Affected versions of the link plugin and link UI component do not sanitize URLs to prevent use of the javascript: scheme. As a result, links with JavaScript URLs can be inserted into th...