https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 06:13:05 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08532 bdu:2023-08532 https://cve.radiocsirt.org/vuln/bdu:2023-08532 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0984 certfr-2023-avi-0984 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0984 https://cve.radiocsirt.org/vuln/euvd-2026-243789 EUVD-2026-243789 https://cve.radiocsirt.org/vuln/euvd-2026-243789 https://cve.radiocsirt.org/vuln/fkie_cve-2023-21416 <p>Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account however the impact is equal. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> <p>Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account however the impact is equal. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-21416 https://cve.radiocsirt.org/vuln/ghsa-6qxx-9rqv-5cjm <p>Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account however the impact is equal. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> <p>Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account however the impact is equal. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> https://cve.radiocsirt.org/vuln/ghsa-6qxx-9rqv-5cjm https://cve.radiocsirt.org/vuln/gsd-2023-21416 gsd-2023-21416 https://cve.radiocsirt.org/vuln/gsd-2023-21416