Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (13 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-4762 1 Axis Communications Ab 1 Axis Camera Station Pro 2026-11-15 8.8 High
A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
CVE-2026-8372 1 Axis Communications Ab 1 Axis Camera Station Pro 2026-11-15 8.8 High
A vulnerability that could allow an attacker to gain unauthorized access.
CVE-2026-12389 1 Axis Communications Ab 1 Axis Camera Station Pro 2026-11-15 8.4 High
A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.
CVE-2026-12963 1 Axis Communications Ab 2 Axis Camera Station, Axis Camera Station Pro 2026-11-15 7.4 High
A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server.
CVE-2026-12964 1 Axis Communications Ab 1 Axis Camera Station Pro 2026-11-15 8 High
A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.
CVE-2026-13312 1 Axis Communications Ab 2 Axis Camera Station, Axis Camera Station Pro 2026-11-15 9.9 Critical
A vulnerability that could allow an attacker to compromise a system.
CVE-2026-13387 1 Axis Communications Ab 1 Axis Camera Station Pro 2026-11-15 3.5 Low
A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended external content under specific conditions.
CVE-2026-63287 1 Axis Communications Ab 2 Axis Camera Station, Axis Camera Station Pro 2026-11-15 6.5 Medium
It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate permissions, which could be used to tamper with audit log creation in AXIS Camera Station.
CVE-2026-63286 1 Axis Communications Ab 2 Axis Camera Station, Axis Camera Station Pro 2026-11-05 7.1 High
Database backups are vulnerable to offline attacks. Backups created using a version prior to the patched version are still vulnerable. AXIS Camera Station Pro automatically creates one more such backup for recovery purpose when the update is applied. Delete all these backups and change the credentials stored in AXIS Camera Station Pro.
CVE-2025-11547 2 Axis, Axis Communications Ab 2 Camera Station Pro, Axis Camera Station Pro 2026-02-26 7.8 High
AXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server as a non-admin user.
CVE-2025-12757 2 Axis, Axis Communications Ab 2 Camera Station Pro, Axis Camera Station Pro 2026-02-17 4.6 Medium
An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to.
CVE-2025-13064 2 Axis, Axis Communications Ab 2 Camera Station Pro, Axis Camera Station Pro 2026-02-17 4.5 Medium
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with.
CVE-2025-12063 2 Axis, Axis Communications Ab 2 Camera Station Pro, Axis Camera Station Pro 2026-02-17 5.7 Medium
An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions.