Lucene search
+L

19792 matches found

VulnCheck KEV
VulnCheck KEV
•added 2024/05/16 12:00 a.m.•9 views

VulnCheck KEV: CVE-2014-100005

D-Link DIR-600 routers contain a cross-site request forgery CSRF vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session...

8CVSS7.2AI score0.43456EPSS
SaveIn wildExploits2References4
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•11 views

D-Link DAR-7000 代码问题漏洞

The D-Link DAR-7000-40 is an Internet Behavior Audit Gateway from China AUO D-Link. The D-Link DAR-7000-40 suffers from a command execution vulnerability, which is caused by incorrect validation of file extensions in the interface/sysmanage/license authorization.php script. An attacker can exploi...

9.8CVSS8AI score0.02311EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•12 views

D-Link DAR-7000 代码问题漏洞

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000-40 V31R02B1413C version, which stems from an incorrect operation of the parameter fileupload that can result in an unrestricted upload...

9.8CVSS6.7AI score0.02311EPSS
SaveExploits0References6
CNVD
CNVD
•added 2024/05/16 12:00 a.m.•22 views

D-Link DAR-7000-40 resmanage.php Command Injection Vulnerability

DAR-7000-40 is a network device suitable for multiple fields such as government, finance, insurance, hotels, small and medium-sized enterprises, and education industry. It provides professional traffic management capabilities, powerful content auditing, advanced Internet behavior management and...

9.8CVSS7.7AI score0.02853EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•0 views

CVE-2024-4965: Improper Neutralization of Special Elements used in an OS Command

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command injection. The attack may be initiated...

9.8CVSS5.5AI score0.02853EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•0 views

CVE-2024-4964: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affects unknown code of the file /firewall/urlblist.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated...

9.8CVSS5.3AI score0.02469EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•0 views

CVE-2024-4963: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-7000-40 V31R02B1413C. This affects an unknown part of the file /url/url.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to initiate the attack remotel...

9.8CVSS5.4AI score0.03001EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/05/16 12:00 a.m.•16 views

D-Link DAR-7000 代码问题漏洞

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000-40 V31R02B1413C version, which stems from an incorrect operation of the parameter fileupload that can result in an unrestricted upload...

9.8CVSS6.7AI score0.03001EPSS
SaveExploits0References6
CISA KEV Catalog
CISA KEV Catalog
•added 2024/05/16 12:00 a.m.•99 views

D-Link DIR-605 Router Information Disclosure Vulnerability

D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a post request to the /getcfg.php page...

7.5CVSS6.8AI score0.86659EPSS
SaveIn wildExploits1
CISA KEV Catalog
CISA KEV Catalog
•added 2024/05/16 12:00 a.m.•52 views

D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

D-Link DIR-600 routers contain a cross-site request forgery CSRF vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session...

8CVSS7.2AI score0.43456EPSS
SaveIn wildExploits2
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•14 views

PT-2024-3652 · D Link · D-Link Dar-7000-40

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C Description: A critical vulnerability has been found in the D-Link DAR-7000-40, affecting an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument...

9.8CVSS6.7AI score0.02311EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•15 views

PT-2024-3695 · D Link · D-Link Dar-7000-40

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C Description: A critical issue has been found in the file /useratte/resmanage.php, allowing for unrestricted upload through the manipulation of the file argument. This can be exploited remotely,...

9.8CVSS7AI score0.02469EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•22 views

PT-2024-3697 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 versions prior to the latest supported version D-Link DAR-8000 versions prior to the latest supported version Description: The issue is related to an unrestricted file upload vulnerability in the /firewall/urlblist.php file of...

9.8CVSS6.8AI score0.02469EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•14 views

PT-2024-3651 · D Link · D-Link Dar-7000-40 +2

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C D-Link DAR-7000 affected versions not specified D-Link DAR-8000 affected versions not specified Description: A critical vulnerability was found in the D-Link DAR-7000 and DAR-8000 routers, affecting an...

9.8CVSS6.4AI score0.02311EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•12 views

PT-2024-3696 · D Link · D-Link Dar-7000-40 +2

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C D-Link DAR-7000 affected versions not specified D-Link DAR-8000 affected versions not specified Description: A critical issue affects an unknown part of the file /url/url.php, allowing for unrestricted...

9.8CVSS6.8AI score0.03001EPSS
SaveExploits0References9
NVD
NVD
•added 2024/05/14 4:17 p.m.•40 views

CVE-2024-34950

D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module...

7.5CVSS7.3AI score0.05153EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/14 4:17 p.m.•11 views

CVE-2024-34950

D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module...

7.5CVSS6.2AI score0.05153EPSS
SaveExploits1References1
OSV
OSV
•added 2024/05/14 3:44 p.m.•12 views

CVE-2024-4699

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...

9.8CVSS6.2AI score0.0612EPSS
SaveExploits1References5
NVD
NVD
•added 2024/05/14 3:44 p.m.•28 views

CVE-2024-4699

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...

9.8CVSS6.5AI score0.0612EPSS
SaveExploits1References5
OSV
OSV
•added 2024/05/14 3:38 p.m.•13 views

CVE-2024-33771

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...

6.5CVSS7.6AI score0.01008EPSS
SaveExploits1References1
Rows per page
Query Builder