https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:16:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08531 bdu:2023-08531 https://cve.radiocsirt.org/vuln/bdu:2023-08531 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0849 certfr-2023-avi-0849 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0849 https://cve.radiocsirt.org/vuln/euvd-2026-200265 EUVD-2026-200265 https://cve.radiocsirt.org/vuln/euvd-2026-200265 https://cve.radiocsirt.org/vuln/fkie_cve-2023-21415 <p>Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> <p>Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-21415 https://cve.radiocsirt.org/vuln/ghsa-fp27-qfpm-95w8 <p>Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> <p>Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> https://cve.radiocsirt.org/vuln/ghsa-fp27-qfpm-95w8 https://cve.radiocsirt.org/vuln/gsd-2023-21415 gsd-2023-21415 https://cve.radiocsirt.org/vuln/gsd-2023-21415