Skip to content
OpenAdvisories

Archive

7 July 2023

Vulnerabilities first published on this day (UTC), newest first.

58 results · Feed

  • Unscored —

    Cross Site Request Forgery (CSRF) vulnerability in MultiTech Conduit AP MTCAP2-L4E1 MTCAP2-L4E1-868-042A v.6.0.0 allows…

  • Unscored —

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the command par…

  • Unscored —

    Tenda AC10 v15.03.06.26 was discovered to contain a command injection vulnerability via the mac parameter in the functi…

  • Unscored —

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the ip paramete…

  • Unscored —

    TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the ussd paramete…

  • Unscored —

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain an unauthenticated remote code execution (RCE) vulner…

  • Unscored —

    TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName para…

  • Unscored —

    Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management sec…

  • Unscored —

    Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel.

  • Unscored —

    Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions manage…

  • Unscored —

    Zoho ManageEngine ADAudit Plus before 7100 allows XSS via the username field.

  • Unscored —

    TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the hostname para…

  • Unscored —

    Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups manageme…

  • Unscored —

    TOTOLINK LR350 V9.3.5u.6369_B20220309 was discovered to contain a command injection vulnerability via the FileName para…

  • Unscored —

    TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command injection vulnerability via the admuser par…

  • Unscored —

    Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definiti…

  • Unscored —

    Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management…

  • Unscored —

    Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management sec…