9639 matches found
CVE-2020-8962
CVE-2020-8962 describes a stack-based buffer overflow in the D-Link DIR-842 REVC, caused by the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint (firmware v3.13B09 HOTFIX). The provided documents do not explicitly detail the impact beyond the overflow descriptio...
CVE-2020-8962
A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...
CVE-2020-8962: Out-of-bounds Write
A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...
The vulnerability of D-Link DIR-601 router’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges.
The vulnerability of D-Link DIR-601 router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
DEBIAN-CVE-2013-3564
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...
UBUNTU-CVE-2013-3564
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...
CVE-2013-7055
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7054
D-Link DIR-100 4.03B07: cli.cgi XSS...
CVE-2013-7051
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
CVE-2013-7053
D-Link DIR-100 4.03B07: cli.cgi CSRF...
Authorization
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
Cross site request forgery (csrf)
D-Link DIR-100 4.03B07: cli.cgi CSRF...
Information disclosure
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
Security feature bypass
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...
Cross site scripting
D-Link DIR-100 4.03B07: cli.cgi XSS...
CVE-2013-7055
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7055
D-Link DIR-100 vulnerable on firmware 4.03B07 (hardware rev D1) to an information disclosure issue affecting PPTP and PoE data (CVE-2013-7055). This vulnerability is network-facing with risk of exposing sensitive information; vendor released a patched firmware (4.03B13) addressing the information...
CVE-2013-7054
D-Link DIR-100 4.03B07: cli.cgi XSS...
CVE-2013-7054
CVE-2013-7054 affects D-Link DIR-100 with firmware 4.03B07 in the cli.cgi component, enabling Cross-Site Scripting (XSS). Public details from multiple sources confirm the issue and indicate a vendor fix to 4.03B13; applying the patched firmware is recommended. CVSS vectors show network-remote acc...