# CVEs published 2020-01-19

6 CVEs were published on January 19, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-7234](https://cve.now/CVE-2020-7234.md): Ruckus ZoneFlex R310 104.0.0.0.1347 devices allow Stored XSS via the SSID field on the Configuration \> Radio 2.4G \> Wireless X screen (after (no CVSS)
- [CVE-2020-7235](https://cve.now/CVE-2020-7235.md): UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title). (no CVSS)
- [CVE-2020-7236](https://cve.now/CVE-2020-7236.md): UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cw2?td= (Site Name field of the Site Setup section). (no CVSS)
- [CVE-2020-7231](https://cve.now/CVE-2020-7231.md): Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid. (no CVSS)
- [CVE-2020-7232](https://cve.now/CVE-2020-7232.md): Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a We (no CVSS)
- [CVE-2020-7233](https://cve.now/CVE-2020-7233.md): KMS Controls BAC-A1616BC BACnet devices have a cleartext password of snowman in the BACKDOOR\_NAME variable in the BC\_Logon.swf file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-01-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.