iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions 2.3.1 and below contain a memory leak vulnerability in its XML MPE Parsing Path (iccFromXml). [CVSS 3.3 LOW]
Denial Of Service
Iccdev
Color
NVD
GitHub
CVSS 3.1
3.3
EPSS
0.0%
Command injection in TOTOLINK WA300 firmware (version 5.2cu.7112_B20190227 and earlier) allows authenticated remote attackers to execute arbitrary commands through a malformed UPLOAD_FILENAME parameter in the cstecgi.cgi function. Public exploit code exists for this vulnerability, and no patch is currently available.
Command Injection
Wa300 Firmware
TOTOLINK
NVD
GitHub
VulDB
CVSS 4.0
2.1
EPSS
3.1%