Skip to content
OpenAdvisories

Archive

2 June 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.1

    MileSight DeviceHub - CWE-320: Key Management Errors

    MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic

  • Critical 9.8

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values

    MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass

  • Critical 10.0

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

    MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function

  • Critical 9.8

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE