Skip to content
OpenAdvisories

Archive

25 August 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2023-4542 Public exploit Scanner template EPSS 85%

    D-Link DAR-8000-10 sys1.php os command injection

    A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to…

  • Medium 6.1
    CVE-2023-41080 Public exploit

    Apache Tomcat: Open redirect with FORM authentication

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 thr…