Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
axis vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2015-8255
AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.
Axis Axis Communications Firmware
1 EDB exploit
7.5
CVSSv3
CVE-2015-8258
AXIS Communications products with firmware up to and including 5.80.x allow remote malicious users to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability."
Axis Axis Communications Firmware
1 EDB exploit
NA
CVE-2008-5260
Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote malicious users to execute arbitrary code via a long image_pan_tilt property value.
Axis Axis Camera Control 2.40.0.0
NA
CVE-2000-0144
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
Axis 700 Network Document Server 1.0
Axis 700 Network Document Server 1.10
Axis 700 Network Document Server 1.11
Axis 700 Network Document Server 1.12
Axis 700 Network Document Server 1.14
Axis 700 Network Document Server 1.13
NA
CVE-2007-5213
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and previous versions allow remote malicious users to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServe...
Axis 2100 Network Camera Firmware
Axis 2100 Network Camera 2.02
NA
CVE-2007-5212
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware prior to 2.43 allow remote malicious users to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1...
Axis 2100 Network Camera 2.02
Axis 2100 Network Camera Firmware
NA
CVE-2004-0789
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and previous versions as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x prior to 2.2.3 and 3.5.x prior to 3.5.2, allow remote malicious users to cause a ...
Delegate Delegate 7.8.1
Delegate Delegate 7.8.2
Delegate Delegate 8.9.1
Delegate Delegate 8.9.2
Dnrd Dnrd 1.3
Dnrd Dnrd 1.4
Dnrd Dnrd 2.0
Dnrd Dnrd 2.6
Dnrd Dnrd 2.7
Don Moore Mydns 0.9
Maradns Maradns 0.5.28
Posadis Posadis 0.50.6
Posadis Posadis 0.50.7
Qbik Wingate 3.0
Qbik Wingate 4.0.1
Delegate Delegate 7.7.1
Delegate Delegate 7.8.0
Delegate Delegate 8.5.0
Delegate Delegate 8.9
Dnrd Dnrd 1.1
Dnrd Dnrd 1.2
Dnrd Dnrd 2.4
9.8
CVSSv3
CVE-2023-40743
** UNSUPPORTED WHEN ASSIGNED ** When integrating Apache Axis 1.x in an application, it may not have been obvious that looking up a service through "ServiceFactory.getService" allows potentially dangerous lookup mechanisms such as LDAP. When passing untrusted input to th...
Apache Axis
7.2
CVSSv3
CVE-2023-51441
** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perform possible SSRF This issue affects Apache Axis: up to and including 1.3. As Axis 1 has been EOL we recommend you migrate to a different S...
Apache Axis
8.8
CVSSv3
CVE-2023-21406
Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the pacsiod process which is handling the OSDP communication allowing to write outside of the allocated buffer. By appending invalid...
Axis A1001 Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028
CVE-2024-32406
CVE-2024-25624
IMAP
CVE-2024-2310
CVE-2024-0874
CVE-2024-20359
XXE
remote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »