Skip to content
OpenAdvisories

Archive

20 September 2023

Vulnerabilities first published on this day (UTC), newest first.

127 results · Feed

  • High 8.0

    D-LINK DWL-6610 FW_v_4.3.0.8B003C was discovered to contain a stack overflow vulnerability in the function update_users.

  • Unscored —

    D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the popupId parameter in the H5/…

  • High 7.8

    Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device

    An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver.

  • Critical 9.8
    CVE-2023-43374 Scanner template

    Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log parameter at /hoteldrui…

  • Unscored —

    D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the hi_up parameter in the qos_e…

  • Unscored —

    D-Link device DI-7200GV2.E1 v21.04.09E1 was discovered to contain a stack overflow via the prev parameter in the H5/log…

  • Critical 9.8

    ReportLab vulnerable to remote code execution via paraparser

    paraparser in ReportLab before 3.5.31 allows remote code execution because start_unichar in paraparser.py evaluates untrusted user input in a unichar element in a crafted XML document with '<unichar code="' followed by arbitrary Python code, a similar issue t…