Lucene search
+L

17741 matches found

CNNVD
CNNVD
added 2025/01/15 12:00 a.m.12 views

D-Link DIR-878 安全漏洞

The D-Link DIR-878 is a wireless router from China's AUO D-Link. An information disclosure vulnerability exists in the D-Link DIR-878 version 1.03, which stems from insufficient protection of sensitive information in the component HTTP POST request handler, and can be exploited by an attacker to...

7.5CVSS5.1AI score0.01413EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/15 12:00 a.m.12 views

PT-2025-1265 · D Link · D-Link Dir-878

Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version 1.03 Description: A vulnerability has been found in the D-Link DIR-878, affecting an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. This issue leads to information disclosure and can...

7.5CVSS5.3AI score0.01413EPSS
SaveExploits0References12
Vulnrichment
Vulnrichment
added 2025/01/15 12:00 a.m.14 views

CVE-2025-22968

An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker to execute arbitrary code via SSH using root account without restrictions...

7.9AI score0.02497EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.14 views

D-Link DWR-M972V 安全漏洞

The D-Link DWR-M972V is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DWR-M972V version 1.05SSG, which can be exploited by remote attackers to execute arbitrary code via SSH using the root account without restriction...

9.8CVSS7.8AI score0.02497EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/01/15 12:00 a.m.34 views

CVE-2025-22968

An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker to execute arbitrary code via SSH using root account without restrictions...

0.02497EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.14 views

PT-2025-4753 · D Link · D-Link Dwr-M972V

Name of the Vulnerable Software and Affected Versions: D-Link DWR-M972V version 1.05SSG Description: The issue is related to the implementation of the SSH protocol in the D-Link DWR-M972V router's firmware, which allows a remote attacker to execute arbitrary code via SSH using a root account...

9.8CVSS7.3AI score0.02497EPSS
SaveExploits1References8
BDU FSTEC
BDU FSTEC
added 2025/01/12 12:00 a.m.14 views

The vulnerability of the formSetDDNS function (/goform/formSetDDNS) in D-Link DIR-619L router software allows a hacker to cause a service failure.

The vulnerability of the formSetDDNS function /goform/formSetDDNS in D-Link DIR-619L router software lies in the copying of a buffer without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability allows an attacker to cause a service...

9CVSS7.9AI score0.01502EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/12 12:00 a.m.11 views

The vulnerability of the formSetLog function (/goform/formSetLog) in D-Link DIR-619L router software allows a intruder to trigger a service failure.

The vulnerability of the formSetLog /goform/formSetLog function in D-Link DIR-619L router microprogramming software lies in the copying of buffers without checking the size of input data when processing the curTime parameter. Exploiting this vulnerability can allow an attacker to cause service...

9CVSS7.6AI score0.01584EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/12 12:00 a.m.11 views

The vulnerability of the formResetStatistic function (/goform/formResetStatistic) in D-Link DIR-619L router software allows a hacker to trigger a service failure.

The vulnerability of the formResetStatistic function /goform/formResetStatistic in D-Link DIR-619L router software lies in the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability can allow an attacker to caus...

9CVSS7.7AI score0.00977EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/09 12:00 a.m.19 views

The vulnerability of the hnap_main() function in D-LINK DIR-806 wireless router software allows a hacker to execute arbitrary commands, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the hnapmain function in D-LINK DIR-806 wireless routers is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely, gain unauthorized...

10CVSS8.3AI score0.19442EPSS
SaveExploits1References6
OpenVAS
OpenVAS
added 2025/01/08 12:00 a.m.156 views

D-Link DIR-619L Multiple Vulnerabilities (2024 - 2025)

D-Link DIR-619L devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.8CVSS7.6AI score0.06682EPSS
SaveExploits41References40
Positive Technologies
Positive Technologies
added 2025/01/06 12:00 a.m.16 views

PT-2025-3922 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823X versions 240126/240802 Description: A critical vulnerability has been found, affecting the function FUN 00412244. This issue leads to a null pointer dereference and can be exploited remotely. The exploit has been disclosed to...

8.7CVSS7.7AI score0.01871EPSS
SaveExploits1References11
CNVD
CNVD
added 2025/01/06 12:00 a.m.13 views

D-Link DIR-816 A2 Improper Access Control Vulnerability

The D-Link DIR-816 A2 is a wireless router from AUO D-Link of Taiwan, China. An improper access control vulnerability exists in the D-Link DIR-816 A2. The vulnerability originates from /goform/DDNS in the DDNS Service component and can be exploited by an attacker to access and manipulate the DDNS...

6.9CVSS5.4AI score0.00801EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/01/03 12:00 a.m.14 views

The vulnerability in the web interface for managing D-Link DIR-823G microprogramming routers allows a hacker to alter the device’s configuration.

The vulnerability of the web interface for managing D-Link DIR-823G microprogramming devices is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to alter the device’s configuration by sending a specially crafted HTTP POST request...

7.5CVSS7.2AI score0.01927EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/01/02 1:15 p.m.14 views

CVE-2024-13108

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been...

5.3CVSS5.5AI score0.00989EPSS
SaveExploits0References5
NVD
NVD
added 2025/01/02 1:15 p.m.26 views

CVE-2024-13108

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been...

6.9CVSS0.00989EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/01/02 12:31 p.m.8 views

CVE-2024-13108 D-Link DIR-816 A2 form2NetSniper.cgi access control

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been...

6.9CVSS7.3AI score0.00989EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/01/02 12:31 p.m.50 views

CVE-2024-13108 D-Link DIR-816 A2 form2NetSniper.cgi access control

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been...

6.9CVSS0.00989EPSS
SaveExploits0References5
CVE
CVE
added 2025/01/02 12:31 p.m.75 views

CVE-2024-13108

CVE-2024-13108 affects the D-Link DIR-816 A2 router (firmware version 1.10CNB05_R1B011D88210). The issue is an access control failure in the /goform/form2NetSniper.cgi handler that can be triggered remotely, with the exploit disclosed publicly. Multiple sources concur on improper access controls ...

6.9CVSS5.5AI score0.00989EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2025/01/02 12:15 p.m.12 views

CVE-2024-13107

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. It has been classified as critical. This affects an unknown part of the file /goform/form2LocalAclEditcfg.cgi of the component ACL Handler. The manipulation leads to improper access controls. It is possible to initiate the atta...

5.3CVSS5.4AI score0.01088EPSS
SaveExploits0References5
Rows per page
Query Builder