<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: di-604</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2010-2293: The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of ser</title><link>https://patchthecve.com/cve/CVE-2010-2293.html</link><guid>https://patchthecve.com/cve/CVE-2010-2293.html</guid><pubDate>Tue, 16 Jun 2026 23:20:29 +0000</pubDate><description>MEDIUM 6.8: The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large &quot;ip textfield&quot; size.</description></item><item><title>CVE-2010-2292: Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote </title><link>https://patchthecve.com/cve/CVE-2010-2292.html</link><guid>https://patchthecve.com/cve/CVE-2010-2292.html</guid><pubDate>Tue, 16 Jun 2026 23:20:28 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field.</description></item><item><title>CVE-2008-1258: Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to in</title><link>https://patchthecve.com/cve/CVE-2008-1258.html</link><guid>https://patchthecve.com/cve/CVE-2008-1258.html</guid><pubDate>Tue, 16 Jun 2026 22:51:22 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter.</description></item><item><title>CVE-2004-0661: Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers t</title><link>https://patchthecve.com/cve/CVE-2004-0661.html</link><guid>https://patchthecve.com/cve/CVE-2004-0661.html</guid><pubDate>Tue, 16 Jun 2026 22:06:06 +0000</pubDate><description>MEDIUM 5.0: Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.</description></item></channel></rss>