Skip to content
OpenAdvisories

Archive

8 September 2024

Vulnerabilities first published on this day (UTC), newest first.

← August 2024 2024 / September /8 October 2024 →
  1. 111
  2. 276
  3. 374
  4. 4176
  5. 568
  6. 674
  7. 751
  8. 827
  9. 957
  10. 10237
  11. 11115
  12. 12118
  13. 13152
  14. 1413
  15. 1529
  16. 16164
  17. 17107
  18. 18241
  19. 1961
  20. 2038
  21. 219
  22. 2220
  23. 2362
  24. 2474
  25. 25103
  26. 26119
  27. 27162
  28. 2829
  29. 299
  30. 3066
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.1
    CVE-2024-8580

    TOTOLINK AC1200 T8 shadow.sample hard-coded password

    A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This vulnerability affects unknown code of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can be initiated remotely. T…

    Toto Link AC1200 T8
  • High 8.8
    CVE-2024-8579

    TOTOLINK AC1200 T8 cstecgi.cgi setWiFiRepeaterCfg buffer overflow

    A vulnerability classified as critical has been found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. This affects the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. It is possibl…

    Toto Link AC1200 T8
  • High 8.8
    CVE-2024-8578

    TOTOLINK AC1200 T8 cstecgi.cgi setWiFiMeshName buffer overflow

    A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220. It has been rated as critical. Affected by this issue is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument device_name leads to buffer overflo…

    Toto Link AC1200 T8
  • High 8.8
    CVE-2024-8577

    TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow

    A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the ar…

    Toto Link AC1200 T8 AC1200 T10
  • High 8.8
    CVE-2024-8576

    TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow

    A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been classified as critical. Affected is the function setIpPortFilterRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads …

    Toto Link AC1200 T8 AC1200 T10
  • High 8.8
    CVE-2024-8575

    TOTOLINK AC1200 T8 cstecgi.cgi setWiFiScheduleCfg buffer overflow

    A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220 and classified as critical. This issue affects the function setWiFiScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc leads to buffer overflow. The attack m…

    Toto Link AC1200 T8
  • High 8.8
    CVE-2024-8573

    TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow

    A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. This affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument desc/week/sTime…

    Toto Link AC1200 T8 AC1200 T10
  • High 7.3
    CVE-2024-8569

    code-projects Hospital Management System user-login.php sql injection

    A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file user-login.php. The manipulation of the argument username leads to sql injection.…

    code-projects Hospital Management System
  • High 7.3
    CVE-2024-8567

    itsourcecode Payroll Management System ajax.php sql injection

    A vulnerability, which was classified as critical, has been found in itsourcecode Payroll Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_deductions. The manipulation of the argument id leads to sql inject…

    itsourcecode Payroll Management System