<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 18:20:12 +0000</lastBuildDate>
    <item>
      <title>CVE-2018-7235</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2018-7235</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Schneider Electric SE Pelco Sarix Professional&lt;/p&gt;
&lt;p&gt;A vulnerability exists in Schneider Electric&amp;#39;s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of &amp;#39;system.download.sd_file&amp;#39;&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Schneider Electric SE Pelco Sarix Professional&lt;/p&gt;
&lt;p&gt;A vulnerability exists in Schneider Electric&amp;#39;s Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of &amp;#39;system.download.sd_file&amp;#39;&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2018-7235</guid>
    </item>
  </channel>
</rss>
