-Infinity
0

AXIS OSDuring an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a fl…

8.5
First published (updated )

Axis VAPIX Device ConfigurationDuring an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a fl…

7.8
First published (updated )

AXIS OSInput Validation

First published (updated )

AXIS OSMalicious File Upload, Input Validation, Command Injection

3.5
First published (updated )

AXIS OSRace Condition

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

AXIS OSAXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific sourc…

First published (updated )

AXIS OSMarinus Pfund, member of the AXIS OS Bug Bounty Program, has found the VAPIX API alwaysmulti.cgi wa…

First published (updated )

AXIS OS51l3nc3, member of the AXIS OS Bug Bounty Program, has found that a Guard Tour VAPIX API parameter a…

First published (updated )

AXIS OSFlorent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet fra…

7.5
First published (updated )

AXIS OSInput Validation, Command Injection

3.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

AXIS OSRace Condition

EPSS
0.04%
First published (updated )

Axis StorPoint CDAxis StorPoint CD allows remote attackers to access administrator URLs without authentication via a …

First published (updated )

Axis 700 Network Document ServerAxis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users…

7.5
First published (updated )

AXIS OSDuring internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the pro…

EPSS
0.04%
First published (updated )

AXIS OSSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list.cgi…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

AXIS OSSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi …

First published (updated )

AXIS OSJohan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose …

First published (updated )

AXIS OSPath Traversal

First published (updated )

AXIS OSInsufficient input validation in VAPIX API create_overlay.cgi

8.8
EPSS
0.05%
First published (updated )

Axis M3024-LVEInsufficient input validation in VAPIX API tcptext.cgi

8.8
EPSS
0.05%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

AXIS OSSandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.…

7.1
First published (updated )

AXIS OSPath Traversal

7.1
First published (updated )

AXIS OSPath Traversal

7.1
First published (updated )

AXIS OSDuring internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the pro…

7.6
First published (updated )

AXIS OSRemote code execution vulnerability during the installation of ACAP applications on the Axis device

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

AXIS OSNCC Group has found a flaw during the annual internal penetration test ordered by Axis Communication…

7.1
First published (updated )

AXIS OSPath Traversal

8.1
First published (updated )

Axis Communications FirmwareHeap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication

8.8
First published (updated )

AXIS License Plate VerifierNon-sanitized user input could lead to SQL injections in AXIS License Plate Verifier

8.8
First published (updated )

AXIS License Plate VerifierNon-sanitized user input could lead to arbitrary code execution in AXIS License Plate Verifier

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203