Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.59% | — | Axis License Plate Verifier | 3/8/2023 | 17/6/2026 | User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections. | |
| Modificada | Alta (8.8) | 0.83% | — | Axis License Plate Verifier | 3/8/2023 | 17/6/2026 | User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution. | |
| Modificada | Alta (8.8) | 0.83% | — | Axis License Plate Verifier | 3/8/2023 | 17/6/2026 | User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution. | |
| Modificada | Crítica (9.8) | 0.63% | — | Axis License Plate Verifier | 3/8/2023 | 17/6/2026 | Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application. | |
| Modificada | Crítica (9.8) | 0.63% | — | Axis License Plate Verifier | 3/8/2023 | 17/6/2026 | Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems. | |
| Modificada | Alta (8.8) | 0.67% | — | Axis License Plate Verifier | 3/8/2023 | 17/6/2026 | A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges. |