Total 97 security vulnerabilities recorded for axis software and firmware.
Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the...
Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface...
A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges....
Ariel Harush and Roy Hodir from OTORIO have found a flaw in the AXIS A1001 when communicating over OSDP. A heap-based buffer overflow was found in the...
Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that...
AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any othe...
A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an a...
A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation ...
AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe would attem...
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed ...
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients....
User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data...
A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the b...
An issue was discovered in the httpd process in multiple models of Axis IP Cameras. There is Memory Corruption....
An issue was discovered in multiple models of Axis IP Cameras. There is an Incorrect Size Calculation....
An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface....
An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control....
An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection....
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which allows remote attackers to cause a denial of service (crash...
There was a Memory Corruption issue discovered in multiple models of Axis IP Cameras which causes a denial of service (crash). The crash arises from c...
An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. They don't employ a suitable mechanism to prevent a DoS attack,...
An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, and an attack...
An issue was discovered on AXIS P1354 (IP camera) Firmware version 5.90.1.1 devices. The upload web page doesn't verify the file type, and an attacker...
Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_La...