Skip to content
OpenAdvisories

Archive

10 March 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8

    Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection

    A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to o…

  • High 7.5
    CVE-2024-28757 Public exploit

    libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created vi…