漏洞雷达
最近 30 天公开的 CVE · 每 6 小时同步
17,110 条结果
CVSS / CISA KEVAxis Communications AB / AXIS OS
A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution. This flaw can only be exploited after authenticating with an admin-privileged service account.
Axis Communications AB / AXIS Camera Station Pro
A vulnerability that could allow an attacker to gain unauthorized access.
Axis Communications AB / AXIS A1210 - Secure Entry · Axis Communications AB / AXIS A1601 - Secure Entry · +3
A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.
Axis Communications AB / AXIS Camera Station Pro · Axis Communications AB / AXIS Camera Station 5
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper with audit log creation in AXIS Camera Station.
Axis Communications AB / AXIS OS
Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation.
Axis Communications AB / AXIS Camera Station Pro
A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
Axis Communications AB / Signed Video Framework · Axis Communications AB / Signed media verifier · +1
The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected.
Axis Communications AB / AXIS OS
The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.
Axis Communications AB / AXIS OS
The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. This flaw can only be exploited after authenticating with an admin-privileged service account.
Axis Communications AB / AXIS OS
The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account.
Axis Communications AB / AXIS Camera Station Pro
A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended external content under specific conditions.
Axis Communications AB / AXIS Camera Station Pro · Axis Communications AB / AXIS Camera Station 5
A vulnerability that could allow an attacker to compromise a system.
Axis Communications AB / AXIS Camera Station Pro
A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
Axis Communications AB / AXIS Camera Station Pro · Axis Communications AB / AXIS Camera Station 5
A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.
Axis Communications AB / AXIS Camera Station Pro
A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
BulletProof Security
The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent sensitive authentication material from being written to them, relying on access controls that are not enforced under all common web-server configurations, allowing unauthenticated attackers to read logged request data on affected deployments.
All in One Addons For WPBakery Page Builder (formerly Visual Composer)
The All in One Addons For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.2 does not validate a shortcode attribute before using it to build a file path that is included and executed, which could allow users with the contributor role and above to include and execute arbitrary local PHP files on the server.
Zion Builder
The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate their contents before storing them in a publicly accessible location and serving them from the site's own origin, allowing authenticated users with the Author role or above to upload a crafted SVG containing JavaScript that executes in the browser of anyone who opens the file.
Codup / Extend B2B - Companies and Users Management for WooCommerce
The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the register_company_api. This makes it possible for unauthenticated attackers to extract sensitive company data including owner and member WordPress user IDs, company billing email addresses, credit balances and full credit histories with admin user IDs, per-member purchase limits and spend totals, and shared-cart records containing purchase-order numbers.
Hitachi / Hitachi Dynamic Link Manager for AIX · Hitachi / Hitachi Dynamic Link Manager EX for AIX
Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market). This issue affects Hitachi Dynamic Link Manager for AIX: from 7.4.1-00 before 9.0.4-01; Hitachi Dynamic Link Manager EX for AIX: from 7.4.1-00 before 9.0.4-01.
Hitachi / Hitachi Dynamic Link Manager for AIX
Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market). This issue affects Hitachi Dynamic Link Manager for AIX: before 9.0.4-01.
Hitachi / Hitachi Dynamic Link Manager for Linux
Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 6.1.1.-00 before 9.0.5-00.
Hitachi / Hitachi Dynamic Link Manager for Linux
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.
Hitachi / Hitachi Dynamic Link Manager for Linux
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.5.3.-00 before 9.0.5-00.
Hitachi / Hitachi Dynamic Link Manager for Linux
UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00.
Hitachi / Hitachi Dynamic Link Manager for Linux
Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
Hitachi / Hitachi Dynamic Link Manager for Linux
Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
Hitachi / Hitachi Dynamic Link Manager for Linux
Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.
Hitachi / Hitachi Dynamic Link Manager for VMware
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 7.3.0-00 before 9.0.4-01.
Hitachi / Hitachi Dynamic Link Manager for VMware
OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01.
没有匹配的 CVE
This product uses the NVD API but is not endorsed or certified by the NVD.