83 matches found
CVE-2025-4645
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...
CVE-2025-4645
CVE-2025-4645 affects Axis OS/Axis ACAP handling: an ACAP configuration file with insufficient input validation can lead to arbitrary code execution if an Axis device is configured to allow unsigned ACAP apps and a victim is persuaded to install a malicious ACAP package. The vulnerability is atta...
PT-2025-46303
Name of the Vulnerable Software and Affected Versions Axis affected versions not specified Description An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This issue is exploitable if the Axis device is configured to allow the installatio...
PT-2025-46306
Name of the Vulnerable Software and Affected Versions Axis ACAP Application framework affected versions not specified Description The ACAP Application framework may allow for privilege escalation through a symlink attack. Exploitation requires the Axis device to be configured to permit the...
PT-2025-46310
Name of the Vulnerable Software and Affected Versions Axis Communications affected versions not specified Description An ACAP configuration file has improper permissions and lacks input validation, potentially leading to privilege escalation. Exploitation requires the Axis device to allow the...
PT-2025-46304
Name of the Vulnerable Software and Affected Versions Axis affected versions not specified Description A malicious ACAP application can obtain admin-level service account credentials utilized by legitimate ACAP applications, potentially allowing for privilege escalation of the malicious ACAP...
EUVD-2010-2787
Malware in sbrugna...
EUVD-2025-24221
Malicious code in bioql PyPI...
EUVD-2025-24222
Malicious code in bioql PyPI...
CVE-2025-30027
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...
CVE-2025-3892
ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...
CVE-2025-3892
ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...
CVE-2025-3892
ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...
CVE-2025-30027
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...
CVE-2025-30027
An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a...
CVE-2025-3892
ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a maliciou...
CVE-2025-3892
CVE-2025-3892 concerns Axis devices running ACAP; the issue allows elevated privileges when an Axis device is configured to allow unsigned ACAP applications and a malicious ACAP app is installed after user trickery. The CVSS details indicate LOCAL exploitation with HIGH privileges required, high ...
PT-2025-32625 · Axis · Axis
Name of the Vulnerable Software and Affected Versions: Axis affected versions not specified Description: An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This issue can only be exploited if the Axis device is configured to allow the...
PT-2025-32626 · Axis · Axis
Name of the Vulnerable Software and Affected Versions: Axis affected versions not specified Description: ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This issue can only be exploited if the Axis device is configured to allow the...
