543 matches found
CVE-2018-15874
The connected CNVD entry describes a Cross-Site Scripting (XSS) vulnerability in D-Link DIR-615 routers using version 20.07, exploitable by injecting JavaScript into the Status → Active Client Table via the hostname field in DHCP requests. Affected component: the DHCP hostname handling on DIR-615...
CVE-2018-15875
The CVE concerns D-Link DIR-615 routers (version 20.07) with an XSS in the UPnP AddPortMapping SOAP request. The root cause is that the description field can be manipulated to inject JavaScript into the router’s admin UPnP page (Advanced→UPnP). Connected sources (CNVD-2018-16522, NVD entry) confi...
CVE-2018-15874
Cross-site scripting XSS vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status - Active Client Table" page via the hostname field in a DHCP request...
CVE-2018-15874: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status - Active Client Table" page via the hostname field in a DHCP request...
PT-2018-13260
Name of the Vulnerable Software and Affected Versions D-Link DIR-615 router version 20.07 Description A cross-site scripting XSS issue allows an attacker to inject JavaScript into the "Status - Active Client Table" page via the hostname field in a DHCP request. Recommendations For version 20.07,...
PT-2018-13261
Name of the Vulnerable Software and Affected Versions D-Link DIR-615 routers version 20.07 Description A cross-site scripting XSS issue allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an "AddPortMapping" UPnP SOAP request. Recommendations For...
CVE-2018-15875: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request...
CVE-2017-18296
Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD...
Race condition
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20...
CVE-2018-11258
In ADSP RPC in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, a Use After Free condition can occur in versions MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, SD 820, SD 820A, SD 835, SD 845, SDX20...
CVE-2013-10059
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkdir615upexec.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:48:30+00:00| seen|...
D-Link DIR-615 Remote Code Execution Vulnerability
D-Link DIR-615 is a small wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-615 version 2.5.17. The vulnerability can be exploited by remote attackers to execute code via shell metacharacters in the Host field of the System/Traceroute interface...
Remote code execution
D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...
CVE-2018-10431
D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...
CVE-2018-10431
D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...
CVE-2018-10431
D-Link DIR-615, version 2.5.17, is affected by CVE-2018-10431 due to insufficient sanitization of shell metacharacters in the Host field of the System/Traceroute interface, enabling Remote Code Execution. The vulnerability is described across multiple sources (NVD/CNVD/etc.) with a confirmed impa...
CVE-2018-10431
D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...
CVE-2018-10431: Improper Neutralization of Special Elements used in an OS Command
D-Link DIR-615 2.5.17 devices allow Remote Code Execution via shell metacharacters in the Host field of the System / Traceroute screen...
PT-2018-3917 · D Link · D-Link Dir-615
Name of the Vulnerable Software and Affected Versions: D-Link DIR-615 version 2.5.17 Description: The issue is related to the lack of proper sanitization of special elements used in an operating system command, allowing remote code execution. This can be exploited by an attacker to execute...