https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:00:09 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1035 certfr-2024-avi-1035 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1035 https://cve.radiocsirt.org/vuln/euvd-2026-225931 EUVD-2026-225931 https://cve.radiocsirt.org/vuln/euvd-2026-225931 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8160 <p>Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> <p>Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-8160 https://cve.radiocsirt.org/vuln/ghsa-qj8p-c5h3-g242 <p>Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> <p>Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files from/to the Axis device. This flaw can only be exploited after authenticating with an administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.</p> https://cve.radiocsirt.org/vuln/ghsa-qj8p-c5h3-g242