https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T18:36:26.331596+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2018-05329 cnvd-2018-05329 2026-10-09T18:36:26.335679+00:00 cnvd-2018-05329 https://vulnerability.circl.lu/vuln/fkie_cve-2018-7235 fkie_cve-2018-7235 2026-10-09T18:36:26.335714+00:00

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'

 https://vulnerability.circl.lu/vuln/ghsa-hcmc-759g-3vr7 GHSA-hcmc-759g-3vr7 2026-10-09T18:36:26.335749+00:00

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'

 https://vulnerability.circl.lu/vuln/gsd-2018-7235 gsd-2018-7235 2026-10-09T18:36:26.335767+00:00 gsd-2018-7235 https://vulnerability.circl.lu/vuln/var-201803-1842 VAR-201803-1842 2026-10-09T18:36:26.335780+00:00

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file'. Schneider Electric Pelco Sarix Professional Contains an input validation vulnerability.Information may be obtained. SchneiderElectricPelcoSarixProfessional is a video surveillance device from Schneider Electric, France. An attacker could exploit this vulnerability to download arbitrary files