Skip to content
OpenAdvisories

Archive

19 January 2020

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —

    Ruckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the Configuration > Radio 2.4G > Wir…

  • Unscored —

    UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title).

  • Unscored —

    UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup section).

  • Unscored —

    Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is…

  • Unscored —

    Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and pass…

  • Unscored —

    KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR_NAME variable in the BC_Lo…