CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

CNVD•added 2018/08/31 12:00 a.m.•12 views

Xovis PC2, PC2R and PC3 Sensor Cross-Site Request Forgery Vulnerability

The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. A cross-site request forgery vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by remote attackers to perform unauthorized operations...

8.8CVSS8.8AI score0.0046EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2018/08/30 12:00 a.m.•3 views

CVE-2018-11718: Cross-Site Request Forgery (CSRF)

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF...

8.8CVSS7.9AI score0.0046EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/08/30 12:00 a.m.•4 views

CVE-2018-11720: Improper Limitation of a Pathname to a Restricted Directory

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal...

7.5CVSS7.3AI score0.01724EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/08/30 12:00 a.m.•7 views

CVE-2018-11719: Improper Restriction of XML External Entity Reference

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...

4.9CVSS5.6AI score0.00822EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by