<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 18:36:25 +0000</lastBuildDate>
    <item>
      <title>cnvd-2018-05329</title>
      <link>https://vulnerability.circl.lu/vuln/cnvd-2018-05329</link>
      <description>cnvd-2018-05329</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cnvd-2018-05329</guid>
    </item>
    <item>
      <title>fkie_cve-2018-7235</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2018-7235</link>
      <description>&lt;p&gt;A vulnerability exists in Schneider Electric&amp;#39;s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of &amp;#39;system.download.sd_file&amp;#39;&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A vulnerability exists in Schneider Electric&amp;#39;s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of &amp;#39;system.download.sd_file&amp;#39;&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2018-7235</guid>
    </item>
    <item>
      <title>GHSA-hcmc-759g-3vr7</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-hcmc-759g-3vr7</link>
      <description>&lt;p&gt;A vulnerability exists in Schneider Electric&amp;#39;s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of &amp;#39;system.download.sd_file&amp;#39;&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A vulnerability exists in Schneider Electric&amp;#39;s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of &amp;#39;system.download.sd_file&amp;#39;&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-hcmc-759g-3vr7</guid>
    </item>
    <item>
      <title>gsd-2018-7235</title>
      <link>https://vulnerability.circl.lu/vuln/gsd-2018-7235</link>
      <description>gsd-2018-7235</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gsd-2018-7235</guid>
    </item>
    <item>
      <title>VAR-201803-1842</title>
      <link>https://vulnerability.circl.lu/vuln/var-201803-1842</link>
      <description>&lt;p&gt;A vulnerability exists in Schneider Electric&amp;#39;s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of &amp;#39;system.download.sd_file&amp;#39;. Schneider Electric Pelco Sarix Professional Contains an input validation vulnerability.Information may be obtained. SchneiderElectricPelcoSarixProfessional is a video surveillance device from Schneider Electric, France. An attacker could exploit this vulnerability to download arbitrary files&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;A vulnerability exists in Schneider Electric&amp;#39;s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of &amp;#39;system.download.sd_file&amp;#39;. Schneider Electric Pelco Sarix Professional Contains an input validation vulnerability.Information may be obtained. SchneiderElectricPelcoSarixProfessional is a video surveillance device from Schneider Electric, France. An attacker could exploit this vulnerability to download arbitrary files&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/var-201803-1842</guid>
    </item>
  </channel>
</rss>
