Lucene search
+L

1529 matches found

ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.7 views

CVE-2022-30521

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1FW107b09.bin and previous versions. The function created at 0x17958 of /htdocs/cgibin will call sprintf without checking the length of strings in parameters...

10CVSS7.2AI score0.15122EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2022/05/30 12:00 a.m.10 views

The vulnerability of the getcfg.php file in D-Link DIR816L router microprogramming software allows a hacker to gain access to the device.

The vulnerability of the getcfg.php file in D-Link DIR816L router microprogramming software is related to errors in the code. Exploiting this vulnerability can allow an attacker to gain access to the device through a specially created malicious load...

5.5CVSS7.7AI score0.22684EPSS
SaveExploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/05/17 2:15 p.m.6 views

CVE-2022-29332

D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's root folder for FTP access. This allows you to access the entire router file system via the FTP server...

6.5CVSS5.9AI score0.0143EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/05/11 12:00 a.m.16 views

The vulnerability of the cgi-bin/webupg component in D-Link DIR-825AC G1 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the cgi-bin/webupg component in D-Link DIR-825AC G1 router microprogramming software is related to incorrect processing of the cmd parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands using a specially created POST request...

6.3CVSS8.1AI score0.32591EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2022/05/10 2:15 p.m.6 views

CVE-2022-29323

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment...

10CVSS5.9AI score0.03913EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/10 2:15 p.m.4 views

CVE-2022-29326

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter...

10CVSS5.9AI score0.03777EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/10 2:15 p.m.4 views

CVE-2022-29324

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd...

10CVSS5.9AI score0.03913EPSS
SaveExploits1References3
Prion
Prion
added 2022/05/10 2:15 p.m.19 views

Stack overflow

D-Link DIR-816 A2v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter...

10CVSS9.6AI score0.03777EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.14 views

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 A2 is a wireless router from D-Link, Taiwan, China.A buffer overflow vulnerability exists in the D-Link DIR-816 A2, which stems from a boundary error in the addurlfilter parameter in /goform/websURLFilter when handling untrusted input, which could be exploited by an attacker to...

10CVSS8.6AI score0.03777EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/10 12:00 a.m.13 views

D-Link DIR-816 A2 缓冲区错误漏洞

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the D-Link DIR-816 A2v1.10CNB04 version, which originates from a boundary error in the urladd parameter in the device/goform/websURLFilterAddDel when processing untrusted input. An...

10CVSS9.1AI score0.03777EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/02 1:15 p.m.4 views

CVE-2022-28571

D-link 882 DIR882A1FW130B06 was discovered to contain a command injection vulnerability in/usr/bin/cli...

9.8CVSS7.2AI score0.05689EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/05/02 12:00 a.m.11 views

D-link 882 操作系统命令注入漏洞

The D-Link 882 is a router from China-based AUO D-Link. The D-Link 882 suffers from an operating system command injection vulnerability that stems from the inclusion of a command injection vulnerability in /usr/bin/cli...

9.8CVSS8.4AI score0.05689EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/04/27 12:00 a.m.14 views

D-Link DIR-825 G1 操作系统命令注入漏洞

The DIR-825 G1 is a router from D-Link in Taiwan, China. A command injection vulnerability exists in the D-Link DIR-825 G1 firmware version, which stems from a lack of parameter validation in the "webupg" binary file. The vulnerability can be exploited to execute arbitrary system commands with th...

9CVSS6.1AI score0.32591EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/04/27 12:00 a.m.9 views

D-Link DIR-825 G1 安全漏洞

The DIR-825 G1 is a router from D-Link in Taiwan, China. An access control error vulnerability exists in the firmware version of the D-Link DIR-825 G1, which stems from insufficient authentication. The vulnerability can be exploited to bypass authentication via the parameter "autoupgrade.asp" and...

9.8CVSS5.7AI score0.5554EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/04/13 12:00 a.m.6 views

PT-2022-4847 · D Link · D-Link Dir-2150

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2150 version 4.0.1 Description: This issue allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this issue. The specific fla...

8.8CVSS8.9AI score0.01578EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.11 views

The vulnerability of the implementation of the genacgi_main() function in D-Link DIR-859 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the genacgimain function implementation in D-Link DIR-859 router microprogramming software is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure by executing the /gena.cgi...

6.3CVSS6.3AI score0.08588EPSS
SaveExploits1References6
CNVD
CNVD
added 2022/04/12 12:00 a.m.47 views

D-Link DIR-619 Stack Overflow Vulnerability

D-Link DIR-619 is a series of routers from D-Link, a Chinese company. D-Link DIR-619 Ax v1.00 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via the webpage parameter...

7.5CVSS5.2AI score0.02556EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/04/11 12:00 a.m.10 views

PT-2022-2857 · D Link · D-Link Dir-816L

Name of the Vulnerable Software and Affected Versions: D-Link DIR816L versions prior to FW206b01 Description: The issue is related to insufficient access control in the software of D-Link DIR816L routers. This allows remote attackers to access sensitive folders, specifically "folder view.php" and...

7.5CVSS7.4AI score0.39733EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2022/04/11 12:00 a.m.8 views

PT-2022-3217

Name of the Vulnerable Software and Affected Versions D-Link DSL-G2452DG version ME 2.00 Description The issue is related to insecure permissions in the implementation of the execute cmd.cgi script in the D-Link DSL-G2452DG router's firmware. This could allow an attacker to execute arbitrary...

9.8CVSS7AI score0.01186EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/04/11 12:00 a.m.10 views

PT-2022-2702 · D Link · D-Link Dir-816L

Name of the Vulnerable Software and Affected Versions: D-Link DIR816L versions prior to FW206b01 Description: The issue is related to errors in the code of the shareport.php component in the D-Link DIR816L router's firmware. Exploitation of this issue could allow a remote attacker to execute...

6CVSS9.4AI score
SaveExploits0References18
Rows per page
Query Builder