Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

axis / axis_os_2018 CVEs

Beta · best-effort

5 CVEs tagged to axis / axis_os_2018 — 0 Critical, 3 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to axis vendor archive

CVE-2023-21418

Published Nov 21, 2023

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This fla…

CVSS 7.1 · High

Vendor/product tagsBeta · best-effort

CVE-2023-21415

Published Oct 16, 2023

Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This fl…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-31988

Published Oct 5, 2021

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2021-31987

Published Oct 5, 2021

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-31986

Published Oct 5, 2021

User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage.

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1