Lucene search
K

255 matches found

CNNVD
CNNVD
added 2026/03/31 12:0 a.m.10 views

D-Link多款产品 安全漏洞

D-Link DNS-327L is a product of the Chinese company D-Link. The D-Link DNS-327L is a NAS Network Attached Storage device. The D-Link DNS-340L is also a NAS device. The D-Link DNS-120 is a network storage adapter. Several D-Link products have security vulnerabilities, which stem from incorrect...

9CVSS7.7AI score0.00737EPSS
Exploits1References6
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.7 views

多款D-Link产品安全漏洞

D-Link DNS-120, etc., are products of D-Link Corporation from China. The D-Link DNS-120 is a network storage adapter. The D-Link DNR-202L is a network video camera. The D-Link DNS-315L is a network attached storage device. Several D-Link products have security vulnerabilities, which stem from...

9CVSS7.7AI score0.007EPSS
Exploits1References5
EUVD
EUVD
added 2026/03/16 3:30 p.m.5 views

EUVD-2026-12264

A vulnerability has been found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This impacts the function...

6.5CVSS5.4AI score0.03738EPSS
Exploits1References10
EUVD
EUVD
added 2026/03/16 3:30 p.m.8 views

EUVD-2026-12265

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

6.5CVSS5.5AI score0.16779EPSS
Exploits1References15
ATTACKERKB
ATTACKERKB
added 2026/03/16 4:2 a.m.5 views

CVE-2026-4213

A vulnerability was detected in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This vulnerability affects the function...

9CVSS6.4AI score0.00744EPSS
Exploits1References7Affected Software20
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.7 views

D-Link多款产品 安全漏洞

D-Link DNS-120, etc., are products of D-Link Corporation from China. The D-Link DNS-120 is a network storage adapter. The D-Link DNR-202L is a network video camera. The D-Link DNS-315L is a network attached storage device. Several D-Link products have security vulnerabilities; these vulnerabiliti...

9.8CVSS7.4AI score0.00791EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.7 views

D-Link多款产品 安全漏洞

D-Link DNS-320, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-320 is a NAS Network Attached Storage device. The D-Link DNS-120 is a network storage adapter. The D-Link DNS-315L is a network attached storage device. Several D-Link products have security vulnerabilitie...

9.8CVSS7.4AI score0.00744EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.7 views

D-Link多款产品 命令注入漏洞

D-Link DNS-320, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-320 is a NAS Network Attached Storage device. The D-Link DNS-325 is also a NAS device. The D-Link DNS-120 is a network storage adapter. Several D-Link products have command injection vulnerabilities, which...

9.8CVSS6.6AI score0.035EPSS
Exploits1References8
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.7 views

D-Link多款产品 命令注入漏洞

D-Link DNS-320, etc., are products of D-Link Corporation, a Chinese company. The D-Link DNS-320 is a NAS Network Attached Storage device. The D-Link DNS-325 is also a NAS device. The D-Link DNS-120 is a network storage adapter. Several D-Link products have command injection vulnerabilities, which...

9.8CVSS6.6AI score0.03831EPSS
Exploits1References13
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.12 views

D-Link多款产品 访问控制错误漏洞

D-Link DNS-320, etc., are products of D-Link Corporation from China. The D-Link DNS-320 is a NAS Network Attached Storage device. The D-Link DNS-325 is also a NAS device. The D-Link DNS-120 is a network storage adapter. Several D-Link products have vulnerabilities related to access control, which...

9.8CVSS7.1AI score0.01238EPSS
Exploits1References5
CNNVD
CNNVD
added 2026/03/16 12:0 a.m.7 views

D-Link多款产品 命令注入漏洞

D-Link DNS-320, etc., are products of D-Link Corporation from China. The D-Link DNS-320 is a NAS Network Attached Storage device. The D-Link DNS-120 is a network storage adapter. The D-Link DNS-315L is a network attached storage device. Several D-Link products have command injection...

9.8CVSS6.6AI score0.03564EPSS
Exploits1References5
OSV
OSV
added 2026/02/06 7:16 a.m.7 views

CVE-2026-2000

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

7.2CVSS5.5AI score
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/02/06 6:32 a.m.6 views

CVE-2026-2000

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

5.8CVSS5.2AI score0.17152EPSS
Exploits1References4Affected Software1
EUVD
EUVD
added 2026/02/06 6:32 a.m.5 views

EUVD-2026-5693

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

5.8CVSS5AI score0.17152EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2026/02/06 6:32 a.m.5 views

CVE-2026-2000 DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection

A vulnerability was found in DCN DCME-320 up to 20260121. Impacted is the function applyconfig of the file /function/system/basic/bridgecfg.php of the component Web Management Backend. Performing a manipulation of the argument iplist results in command injection. The attack is possible to be...

5.8CVSS5.3AI score0.17152EPSS
Exploits1References4
CVE
CVE
added 2026/02/06 6:32 a.m.13 views

CVE-2026-2000

CVE-2026-2000 affects DCN DCME-320 Web Management Backend. The vulnerability is in apply_config() handling of the ip_list argument in /function/system/basic/bridge_cfg.php, where manipulation leads to command injection. It is remotely exploitable and exploits have been published. Public reports (...

7.2CVSS5AI score0.17152EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.9 views

PT-2026-6684

Name of the Vulnerable Software and Affected Versions DCN DCME-320 versions up to 20260121 Description A flaw exists in the Web Management Backend component of DCN DCME-320. Specifically, manipulating the ip list argument within the apply config function of the /function/system/basic/bridge cfg.p...

5.8CVSS5.4AI score0.17152EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/02/06 12:0 a.m.7 views

DCN DCME-320 命令注入漏洞

DCN DCME-320 is an Internet exchange gateway router developed by China's DCN Technology Co., Ltd. Versions of DCN DCME-320 prior to 20260121 contained a command injection vulnerability. This vulnerability stemmed from incorrect operations with the parameter iplist in the function applyconfig with...

7.2CVSS5.8AI score0.17152EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.8 views

Fortinet FortiManager Private key readable by admin (FG-IR-24-133)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-133 advisory. - A key management error vulnerability CWE-320 in FortiManager, FortiAnalyzer and FortiPortal may allow an authenticated...

6CVSS5.5AI score0.00099EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/09 12:0 a.m.3 views

Fortinet FortiAnalyzer Private key readable by admin (FG-IR-24-133)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-133 advisory. - A key management error vulnerability CWE-320 in FortiManager, FortiAnalyzer and FortiPortal may allow an authenticated...

6CVSS5.5AI score0.00099EPSS
Exploits0References2
Rows per page
Query Builder