CVE-2026-36698

Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportParamSet.sh. The script processes symlinks from uploaded parameter archive files and embeds the symlink target path into a shell command without...

EUVD-2026-109963

Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection vulnerability in /sbin/ImportParamSet.sh. The script processes symlinks from uploaded parameter archive files and embeds the symlink target path into a shell command without...

CVE-2026-36698

Xovis AG products, including APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B (version 2.10.1.1 and earlier), are vulnerable to an OS command injection vulnerability in the /sbin/ImportParamSet.sh script. The flaw occurs because the script processes symlinks from uploaded parameter archiv...

EUVD-2018-3738

Malware in sbrugna...

EUVD-2018-3739

Malware in sbrugna...

EUVD-2018-3737

Malware in sbrugna...

Xovis PC2, PC2R and PC3 Sensor Path Traversal Vulnerability

The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. A directory traversal vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by an attacker to disclose information...

Xovis PC2, PC2R and PC3 Sensor Cross-Site Request Forgery Vulnerability

The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. A cross-site request forgery vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by remote attackers to perform unauthorized operations...

Xovis PC2, PC2R and PC3 XML External Entity Injection Vulnerabilities

The Xovis PC2, PC2R and PC3 are all sensor devices from Xovis USA. An XML external entity injection vulnerability exists in the Xovis PC2, PC2R, and PC3 sensors using firmware version 3.6.0 and earlier, which can be exploited by an attacker to disclose information...

Xovis PC-Series Sensor Detection

Detection of Xovis PC-Series Sensors. The script sends a connection request to the server and attempts to detect Xovis PC-Series Sensors and to extract it SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2018-11719

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...

CVE-2018-11720

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal...

CVE-2018-11718

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF...

Cross site request forgery (csrf)

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF...

CVE-2018-11718

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow CSRF...

CVE-2018-11719

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...

CVE-2018-11720

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal...

Directory traversal

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal...

Xxe

Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow XXE...

CVE-2018-11718

Xovis PC2, PC2R and PC3 devices (firmware up to 3.6.0) are affected by a CSRF vulnerability. The connected CNVD entry explicitly describes a cross-site request forgery path impacting these sensors; no exploitation details, impact quantification, or official remediation/version fixes are provided ...