Lucene search
K

464 matches found

Cvelist
Cvelist
added 2026/06/08 5:45 p.m.38 views

CVE-2026-11555 D-Link DGS-1100-08PD Web boa.conf least privilege violation

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS0.00405EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/06/08 5:45 p.m.8 views

CVE-2026-11555

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS5AI score0.00405EPSS
Exploits0References6Affected Software1
EUVD
EUVD
added 2026/06/08 5:45 p.m.7 views

EUVD-2026-35178

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS5AI score0.00405EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/06/08 5:45 p.m.6 views

CVE-2026-11555 D-Link DGS-1100-08PD Web boa.conf least privilege violation

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS5AI score0.00405EPSS
Exploits0References6
CVE
CVE
added 2026/06/08 5:45 p.m.25 views

CVE-2026-11555

CVE-2026-11555 affects D-Link DGS-1100-08PD (firmware 1.00.006). The Web Interface component processes /etc/boa.conf in an unknown way, leading to a least-privilege violation. The issue can be exploited remotely with high complexity; exploits are publicly available. No remediation details are pro...

7.5CVSS5AI score0.00405EPSS
Exploits0References6Affected Software1
CNNVD
CNNVD
added 2026/06/08 12:0 a.m.11 views

D-Link DGS-1100-08PD 安全漏洞

The D-Link DGS-1100-08PD is an 8-port Gigabit intelligent management switch from D-Link Corporation. Version 1.00.006 of the D-Link DGS-1100-08PD contains a security vulnerability. This vulnerability stems from improper handling of the /etc/boa.conf file within the Web Interface component, which...

7.5CVSS4.9AI score0.00405EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/06/08 12:0 a.m.11 views

PT-2026-47436

A vulnerability was identified in D-Link DGS-1100-08PD 1.00.006. This issue affects some unknown processing of the file /etc/boa.conf of the component Web Interface. Such manipulation leads to least privilege violation. The attack may be launched remotely. The attack requires a high level of...

6.3CVSS4.9AI score0.00405EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2026/06/02 10:2 a.m.9 views

CVE-2026-2237

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information...

6.2CVSS5.8AI score0.00092EPSS
Exploits0References1
NVD
NVD
added 2026/05/27 9:16 a.m.8 views

CVE-2026-2237

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information...

6.2CVSS0.00092EPSS
Exploits0References1
CVE
CVE
added 2026/05/27 8:44 a.m.15 views

CVE-2026-2237

CVE-2026-2237 : A vulnerability in the Synology Storage Manager package (volume encryption) prior to version 1.0.1-1100 arises from using GET requests with sensitive query strings. This allows a local attacker to read sensitive information. Documents identify the affected component as the Storage...

6.2CVSS5.8AI score0.00092EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/27 8:44 a.m.8 views

CVE-2026-2237

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information...

6.2CVSS5.8AI score0.00092EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/27 8:44 a.m.30 views

CVE-2026-2237

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local users on Windows to obtain sensitive information...

6.2CVSS0.00092EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/27 8:44 a.m.10 views

EUVD-2026-32153

A use of get request method with sensitive query strings vulnerability in volume encryption of Synology Storage Manager package before 1.0.1-1100 allows local attackers to obtain sensitive information...

6.2CVSS5.8AI score0.00092EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.10 views

PT-2026-43592

Name of the Vulnerable Software and Affected Versions Synology Storage Manager versions prior to 1.0.1-1100 Description A flaw in the volume encryption component allows local attackers to obtain sensitive information. This occurs because the application uses the GET request method with sensitive...

6.2CVSS5.8AI score0.00092EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/01 9:30 p.m.7 views

EUVD-2026-18023

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

6.9CVSS5.5AI score0.00991EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2026/04/01 7:45 p.m.4 views

CVE-2026-5311

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

6.9CVSS5.8AI score0.00991EPSS
Exploits1References5Affected Software20
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.3 views

D-Link多款产品 访问控制错误漏洞

D-Link DNS-120, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-120 is a network storage adapter. The D-Link DNR-202L is a network video camera. The D-Link DNS-315L is a network attached storage device. Several D-Link products have a vulnerability related to access...

6.9CVSS6.1AI score0.0054EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/04/01 12:0 a.m.5 views

D-Link多款产品 访问控制错误漏洞

D-Link DNS-120, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-120 is a network storage adapter. The D-Link DNR-202L is a network video camera. The D-Link DNS-315L is a network attached storage device. Several D-Link products have a vulnerability related to access...

6.9CVSS6.1AI score0.00991EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.4 views

多款D-Link产品安全漏洞

D-Link DNS-120, etc., are products of D-Link Corporation from China. The D-Link DNS-120 is a network storage adapter. The D-Link DNR-202L is a network video camera. The D-Link DNS-315L is a network attached storage device. Several D-Link products have security vulnerabilities, which stem from...

9CVSS7.7AI score0.007EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.4 views

D-Link多款产品 安全漏洞

D-Link DNS-320, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-320 is a NAS Network Attached Storage device. The D-Link DNS-320L is also a NAS device. The D-Link DNS-120 is a network storage adapter. Several D-Link products have security vulnerabilities, which stem fr...

9CVSS7.7AI score0.00715EPSS
Exploits1References6
Rows per page
Query Builder