Skip to content
OpenAdvisories

Archive

23 December 2015

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —

    eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote …

  • Unscored —

    eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it…

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to…

  • Unscored —

    eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off…

  • Unscored —

    eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtai…

  • Unscored —

    Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject…

  • Unscored —

    Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD…

  • Unscored —

    Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain…

  • Unscored —

    Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors.

  • Unscored —

    Cross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hija…

  • Unscored —

    Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not prop…

  • Unscored —

    EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mech…

  • Unscored —

    Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00…