Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection leading to being. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Command Injection
Axis Os
Axis Os 2022
Axis Os 2024
NVD
CVSS 3.1
2.7
EPSS
0.6%
When a URL is added to the map element, it is recorded in the database with sequential IDs. Rated low severity (CVSS 2.2), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
Zabbix
NVD
CVSS 3.1
2.2
EPSS
0.5%
Fides is an open-source privacy engineering platform. Rated low severity (CVSS 2.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
Fides
NVD
GitHub
CVSS 4.0
2.0
EPSS
0.5%