Skip to content
OpenAdvisories

Archive

23 February 2024

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-26594 EPSS 51%

    ksmbd: validate mech token in session setup

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate mech token in session setup If client send invalid mech token in session setup request, ksmbd validate and make the error if it is invalid.

  • Critical 9.8

    Totolink LR1200GB Web Interface cstecgi.cgi loginAuth stack-based overflow

    A vulnerability classified as critical has been found in Totolink LR1200GB 9.1.0u.6619_B20230130/9.3.5u.6698_B20230810. Affected is the function loginAuth of the file /cgi-bin/cstecgi.cgi of the component Web Interface. The manipulation of the argument http_h…

  • Critical 9.8

    An issue was discovered in Yealink Configuration Encrypt Tool (AES version) and Yealink Configuration Encrypt Tool (RSA…

  • Critical 9.8

    Hitron CODA-4582 and CODA-4589 devices have default PSKs that are generated from 5-digit hex values concatenated with a…

  • Critical 9.8

    ZKteco ZKBio WDMS before 9.0.2 Build 20250526 allows an attacker to download a database backup via the /files/backup/ c…