Improper access control

A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file...

CVE-2018-7826

The CVE-2018-7826 entry concerns a Command Injection vulnerability in the web-based GUI of the Schneider Electric 1st Gen Pelco Sarix Enhanced Camera . Connected sources describe the root cause as insufficient input validation during construction of executable commands in the web interface, enabl...

CVE-2018-7816

Technical details about CVE-2018-7816 are not provided in the connected documents. The available sources reiterate a permissions/privilege issue in the web GUI of the 1st Gen Pelco Sarix Enhanced Camera without specifics on affected versions or exploitability. Monitor for updates.

CVE-2018-7816

A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file...

CVE-2018-7826: Improper Neutralization of Special Elements used in a Command

A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands...

CVE-2018-7816: Undefined Security Weakness

A Permissions, Privileges, and Access Control vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to delete an arbitrary file...

PT-2019-1485

Name of the Vulnerable Software and Affected Versions Pelco Sarix Enhanced Camera affected versions not specified Description A Permissions, Privileges, and Access Control issue exists in the web-based GUI of the Pelco Sarix Enhanced Camera, allowing a remote attacker to delete an arbitrary file...

PT-2019-1487

Name of the Vulnerable Software and Affected Versions Pelco Sarix Enhanced Camera affected versions not specified Description A Command Injection issue exists in the web-based GUI of the Pelco Sarix Enhanced Camera, potentially allowing a remote attacker to execute arbitrary commands. The...

Buffer overflow

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code...

CVE-2018-7238

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code...

CVE-2018-7238

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code...

CVE-2018-7238: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code...

PT-2018-17971

Name of the Vulnerable Software and Affected Versions Pelco Sarix Professional versions prior to 3.29.67 Description A buffer overflow issue exists in the web-based GUI, potentially allowing an unauthenticated, remote attacker to execute arbitrary code. Recommendations For versions prior to...

Cisco IOS XE Software Elevation of Privilege Vulnerability

The Cisco 5760 Wireless LAN Controllers and Catalyst 4500E Supervisor Engine 8-E Wireless Switches are products of Cisco, Inc.The Cisco 5760 Wireless LAN Controllers are wireless controllers. The Cisco 5760 Wireless LAN Controllers are wireless controllers, and the Catalyst 4500E Supervisor Engin...

PT-2017-2995

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software versions 3.7.0E through 3.7.5E Description The issue is related to insufficient validation of HTTP requests in the web-based GUI of Cisco IOS XE Software for Wireless LAN Controllers. This could allow a remote attacker,...

Information disclosure

A vulnerability in the web-based GUI of Cisco Wide Area Application Services WAAS Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are runnin...

CVE-2017-6730

A vulnerability in the web-based GUI of Cisco Wide Area Application Services WAAS Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are runnin...

CVE-2017-6730

CVE-2017-6730 affects Cisco WAAS Central Manager web GUI. A processing error in RBAC allows an unauthenticated, remote attacker to download completed reports from an affected system, causing information disclosure. Affected products configured with Central Manager include Cisco WAAS/ vWAAS applia...

PT-2017-17281

Name of the Vulnerable Software and Affected Versions Cisco Wide Area Application Services WAAS versions 4.47 through 6.23 Cisco Wide Area Application Services WAAS version 6.21 Description A vulnerability in the web-based GUI of Cisco Wide Area Application Services WAAS Central Manager could all...

CVE-2017-6670

A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect issue. More Information: CSCvc54813. Known Affected Releases: 8.17ER1...