Lucene search
+L

451 matches found

zdt
zdt
•added 2017/07/11 12:00 a.m.•55 views

Schneider Electric Pelco Sarix/Spectra Cameras XSS Vulnerability

Pelco cameras suffer from multiple dom-based, stored and reflected XSS vulnerabilities when input passed via several parameters to several scripts is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser sessi...

7AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/07/10 12:00 a.m.•51 views

Pelco Sarix/Spectra Cameras - Cross-Site Request Forgery (Enable SSH Root Access)

Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: Sarix Enhanced - Model: IME219 Firmware: 2.1.2.0.8280-A0.0 Sarix Enhanced - Model: IME119 Firmware: 2.1.2.0.8280-A0.0 Sarix - Model:...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2017/07/10 12:00 a.m.•52 views

Pelco Sarix/Spectra Cameras - Remote Code Execution

Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: Sarix Enhanced - Model: IME219 Firmware: 2.1.2.0.8280-A0.0 Sarix Enhanced - Model: IME119 Firmware: 2.1.2.0.8280-A0.0 Sarix - Model:...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/07/10 12:00 a.m.•44 views

Pelco SarixSpectra Cameras - Cross-Site Request Forgery (Enable SSH Root Access)

Pelco SarixSpectra Cameras - Cross-Site Request Forgery Enable SSH Root Access Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: Sarix Enhanced - Model: IME219 Firmware:...

0.4AI score
SaveExploits0
exploitpack
exploitpack
•added 2017/07/10 12:00 a.m.•48 views

Pelco SarixSpectra Cameras - Remote Code Execution

Pelco SarixSpectra Cameras - Remote Code Execution Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution Vendor: Schneider Electric SE Product web page: https://www.pelco.com Affected version: Sarix Enhanced - Model: IME219 Firmware: 2.1.2.0.8280-A0.0 Sarix Enhanced - Model:...

0.5AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2017/07/10 12:00 a.m.•87 views

Schneider Electric Pelco Sarix/Spectra Cameras Root Remote Code Execution

Summary Pelco offers the broadest selection of IP cameras designed for security surveillance in a wide variety of commercial and industrial settings. From our industry-leading fixed and high-speed IP cameras to panoramic, thermal imaging, explosionproof and more, we offer a camera for any...

9CVSS8.1AI score0.0169EPSS
SaveExploits1
Zero Science Lab
Zero Science Lab
•added 2017/07/10 12:00 a.m.•213 views

Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access

Summary Pelco offers the broadest selection of IP cameras designed for security surveillance in a wide variety of commercial and industrial settings. From our industry-leading fixed and high-speed IP cameras to panoramic, thermal imaging, explosionproof and more, we offer a camera for any...

5.8AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
•added 2017/07/10 12:00 a.m.•103 views

Schneider Electric Pelco Sarix/Spectra Cameras Multiple XSS Vulnerabilities

Summary Pelco offers the broadest selection of IP cameras designed for security surveillance in a wide variety of commercial and industrial settings. From our industry-leading fixed and high-speed IP cameras to panoramic, thermal imaging, explosionproof and more, we offer a camera for any...

5.4CVSS6.4AI score0.00803EPSS
SaveExploits1
Fedora
Fedora
•added 2014/01/11 8:48 a.m.•68 views

[SECURITY] Fedora 20 Update: gnome-chemistry-utils-0.14.5-1.fc20

This package is a set of chemical utils. Several programs are available: A 3D molecular structure viewer GChem3D. A Chemical calculator GChemCalc. A 2D structure editor GChemPaint. A periodic table of the elements application GChemTable. A crystalline structure editor GCrystal. A spectra viewer...

4.3CVSS2.7AI score0.01747EPSS
SaveExploits1
Fedora
Fedora
•added 2014/01/11 8:46 a.m.•59 views

[SECURITY] Fedora 19 Update: gnome-chemistry-utils-0.14.5-1.fc19

This package is a set of chemical utils. Several programs are available: A 3D molecular structure viewer GChem3D. A Chemical calculator GChemCalc. A 2D structure editor GChemPaint. A periodic table of the elements application GChemTable. A crystalline structure editor GCrystal. A spectra viewer...

4.3CVSS2.7AI score0.01747EPSS
SaveExploits1
Fedora
Fedora
•added 2014/01/11 8:43 a.m.•28 views

[SECURITY] Fedora 18 Update: gnome-chemistry-utils-0.14.5-1.fc18

This package is a set of chemical utils. Several programs are available: A 3D molecular structure viewer GChem3D. A Chemical calculator GChemCalc. A 2D structure editor GChemPaint. A periodic table of the elements application GChemTable. A crystalline structure editor GCrystal. A spectra viewer...

4.3CVSS2.7AI score0.01747EPSS
SaveExploits1
Cvelist
Cvelist
•added 2001/05/07 4:00 a.m.•36 views

CVE-2000-0120

The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter...

6.8AI score0.0125EPSS
SaveExploits0References2
CVE
CVE
•added 2001/05/07 4:00 a.m.•69 views

CVE-2000-0120

The CVE-2000-0120 entry concerns Allaire Spectra 1.0, where the Remote Access Service invoke.cfm template allows bypassing authentication via the bAuthenticated parameter. This constitutes a vulnerability in the authentication logic of the template, enabling partial disclosure/modification risks ...

7.5CVSS7.2AI score0.0125EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/05/07 12:00 a.m.•3 views

CVE-2000-0120: Undefined Security Weakness

The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter...

7.5CVSS5.8AI score0.0125EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2001/01/22 5:00 a.m.•33 views

CVE-2000-0862

Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information...

6.6AI score0.01308EPSS
SaveExploits0References2
CVE
CVE
•added 2001/01/22 5:00 a.m.•83 views

CVE-2000-0862

The vulnerability CVE-2000-0862 affects the Allaire Spectra 1.0.1 product, specifically its administrative interface utility. The exposed issue allows remote attackers to read and modify sensitive configuration information. The NVD entry lists a CVSS v2 base score of 6.4 (Medium) with network acc...

6.4CVSS7AI score0.01308EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/01/22 12:00 a.m.•7 views

CVE-2000-0862: Undefined Security Weakness

Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information...

6.4CVSS5.8AI score0.01308EPSS
SaveExploits0References1
NVD
NVD
•added 2000/11/14 5:00 a.m.•29 views

CVE-2000-0862

Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information...

6.4CVSS6.6AI score0.01308EPSS
SaveExploits0References2
CVE
CVE
•added 2000/07/12 4:00 a.m.•67 views

CVE-2000-0334

CVE-2000-0334 affects the Allaire Spectra container editor preview tool. The issue arises from improper enforcement of object security, permitting an attacker to perform unauthorized activities through an object-method added to the container object via a publishing rule. The documented impact is ...

2.1CVSS6.8AI score0.00351EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2000/07/12 4:00 a.m.•46 views

CVE-2000-0334

The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule...

6.5AI score0.00351EPSS
SaveExploits0References2
Rows per page
Query Builder