cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2018-7782,https://securityvulnerability.io/vulnerability/CVE-2018-7782,,"In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, authenticated users can view passwords in clear text.",Schneider Electric,Pelco Sarix Professional V1,8.8,HIGH,0.0010400000028312206,false,,false,false,false,,,false,false,,2018-07-03T14:29:00.000Z,0
CVE-2018-7781,https://securityvulnerability.io/vulnerability/CVE-2018-7781,,"In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, by sending a specially crafted request an authenticated user can view password in clear text and results in privilege escalation.",Schneider Electric,Pelco Sarix Professional V1,8.8,HIGH,0.0010400000028312206,false,,false,false,false,,,false,false,,2018-04-24T00:00:00.000Z,0
CVE-2018-7780,https://securityvulnerability.io/vulnerability/CVE-2018-7780,,"In Schneider Electric Pelco Sarix Professional 1st generation cameras with firmware versions prior to 3.29.69, a buffer overflow vulnerability exist in cgi program ""set"".",Schneider Electric,Pelco Sarix Professional V1,9.8,CRITICAL,0.0024999999441206455,false,,false,false,false,,,false,false,,2018-04-24T00:00:00.000Z,0
CVE-2018-7230,https://securityvulnerability.io/vulnerability/CVE-2018-7230,,A XML external entity (XXE) vulnerability exists in the import.cgi of the web interface component of the Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67.,Schneider Electric,Pelco Sarix Professional,8.8,HIGH,0.0032099999953061342,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7231,https://securityvulnerability.io/vulnerability/CVE-2018-7231,,A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'.,Schneider Electric,Pelco Sarix Professional,9.8,CRITICAL,0.005909999832510948,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7232,https://securityvulnerability.io/vulnerability/CVE-2018-7232,,A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'network.ieee8021x.delete_certs'.,Schneider Electric,Pelco Sarix Professional,9.8,CRITICAL,0.005909999832510948,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7233,https://securityvulnerability.io/vulnerability/CVE-2018-7233,,A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'model_name' or 'mac_address'.,Schneider Electric,Pelco Sarix Professional,9.8,CRITICAL,0.005909999832510948,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7237,https://securityvulnerability.io/vulnerability/CVE-2018-7237,,A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/set_param to the file name with the value of 'system.delete.sd_file',Schneider Electric,Pelco Sarix Professional,9.1,CRITICAL,0.0026599999982863665,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7238,https://securityvulnerability.io/vulnerability/CVE-2018-7238,,"A buffer overflow vulnerability exist in the web-based GUI of Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to execute arbitrary code.",Schneider Electric,Pelco Sarix Professional,9.8,CRITICAL,0.009909999556839466,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7234,https://securityvulnerability.io/vulnerability/CVE-2018-7234,,A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate.,Schneider Electric,Pelco Sarix Professional,7.5,HIGH,0.00139999995008111,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7227,https://securityvulnerability.io/vulnerability/CVE-2018-7227,,A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow retrieving of specially crafted URLs without authentication that can reveal sensitive information to an attacker.,Schneider Electric,Pelco Sarix Professional,5.3,MEDIUM,0.0010499999625608325,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7228,https://securityvulnerability.io/vulnerability/CVE-2018-7228,,"A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and get the administrator privileges.",Schneider Electric,Pelco Sarix Professional,9.8,CRITICAL,0.0062500000931322575,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7229,https://securityvulnerability.io/vulnerability/CVE-2018-7229,,"A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow an unauthenticated, remote attacker to bypass authentication and gain administrator privileges because the use of hardcoded credentials.",Schneider Electric,Pelco Sarix Professional,9.8,CRITICAL,0.0063599999994039536,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7235,https://securityvulnerability.io/vulnerability/CVE-2018-7235,,A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of the shell meta characters with the value of 'system.download.sd_file',Schneider Electric,Pelco Sarix Professional,7.5,HIGH,0.0027099999133497477,false,,false,false,false,,,false,false,,2018-03-09T23:29:00.000Z,0
CVE-2018-7236,https://securityvulnerability.io/vulnerability/CVE-2018-7236,,A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could enable SSH service due to lack of authentication for /login/bin/set_param could enable SSH service.,Schneider Electric,Pelco Sarix Professional,8.1,HIGH,0.002400000113993883,false,,false,false,false,,,false,false,,2018-03-01T00:00:00.000Z,0