|
196371
|
4.8 |
MEDIUM
Network
|
smc
|
d3g0804_firmware
|
SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a successful login to the admin account).
|
CWE-79
Cross-site Scripting
|
CVE-2020-7249
|
2024-11-21 14:36 |
2020-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196372
|
7.2 |
HIGH
Network
|
comtechtel
|
stampede_fx-1010_firmware
|
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Poll Routes page and entering shell metacharacters in the Router…
|
CWE-78
OS Command
|
CVE-2020-7244
|
2024-11-21 14:36 |
2020-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196373
|
7.2 |
HIGH
Network
|
comtechtel
|
stampede_fx-1010_firmware
|
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell metacharacters in the URL fiel…
|
CWE-78
OS Command
|
CVE-2020-7243
|
2024-11-21 14:36 |
2020-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196374
|
7.2 |
HIGH
Network
|
comtechtel
|
stampede_fx-1010_firmware
|
Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and entering shell metacharacters i…
|
CWE-78
OS Command
|
CVE-2020-7242
|
2024-11-21 14:36 |
2020-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196375
|
7.5 |
HIGH
Network
|
wpseeds
|
wp_database_backup
|
The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to read ZIP archives by guessing…
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2020-7241
|
2024-11-21 14:36 |
2020-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196376
|
5.5 |
MEDIUM
Local
|
gallagher
|
command_centre
|
An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration data (used for third party inte…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2020-7215
|
2024-11-21 14:36 |
2020-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196377
|
8.8 |
HIGH
Network
|
cacti
|
cacti
|
Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug Log field of poller_automation.php. OS commands are executed when a new poller c…
|
CWE-78
OS Command
|
CVE-2020-7237
|
2024-11-21 14:36 |
2020-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196378
|
6.1 |
MEDIUM
Network
|
uhp
|
uhp-100_firmware
|
UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup section).
|
CWE-79
Cross-site Scripting
|
CVE-2020-7236
|
2024-11-21 14:36 |
2020-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196379
|
6.1 |
MEDIUM
Network
|
uhp
|
uhp-100_firmware
|
UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title).
|
CWE-79
Cross-site Scripting
|
CVE-2020-7235
|
2024-11-21 14:36 |
2020-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
196380
|
4.8 |
MEDIUM
Network
|
ruckuswireless
|
r310_firmware
|
Ruckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the Configuration > Radio 2.4G > Wireless X screen (after a successful login to the super account).
|
CWE-79
Cross-site Scripting
|
CVE-2020-7234
|
2024-11-21 14:36 |
2020-01-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|