CVE-2015-0152

D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password...

Design/Logic Flaw

The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions via unspecified vectors...

CVE-2015-0152

D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password...

CVE-2014-8888

The remote administration interface in D-Link DIR-815 devices with firmware before 2.03.B02 allows remote attackers to execute arbitrary commands via vectors related to an "HTTP command injection issue."...

CVE-2015-0152

CVE-2015-0152 affects D‑Link DIR‑815 devices with firmware prior to 2.07.B01. The root cause is cleartext storage of the administrative password, allowing remote attackers to obtain sensitive information. Affected product: D‑Link DIR‑815 router; vulnerable component is the firmware where the admi...

CVE-2015-0153

D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key...

CVE-2015-0151

The CVE-2015-0151 issue affects the D-Link DIR-815 router (firmware prior to 2.07.B01). It is a Cross-Site Request Forgery vulnerability that enables an attacker to hijack the authentication of arbitrary users for requests that inject XSS sequences. The root cause is insufficient validation of us...

CVE-2014-8888

The CVE-2014-8888 entry maps to a vulnerability in D-Link DIR-815 devices (firmware prior to 2.03.B02) where the remote administration interface is susceptible to an HTTP command injection due to insufficient input validation. Affected component/process: the remote admin web interface; impact per...

CVE-2015-0151

Cross-site request forgery CSRF vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences...

CVE-2015-0150

The CVE-2015-0150 entry concerns D-Link DIR-815 devices with firmware before 2.07.B01, where the remote administration UI permits bypassing access restrictions via unspecified vectors. Affected product is DIR-815; vulnerable component is the remote management UI. Impact is bypassed access control...

CVE-2015-0153

CVE-2015-0153 affects D-Link DIR-815 routers. Affected: DIR-815 devices with firmware prior to 2.07.B01. Issue: plaintext storage of the wireless key allows remote attackers to obtain sensitive information. Impact: information disclosure (partial to high depending on scope). Root cause: cleartext...

PT-2018-4332 · D Link · Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue allows remote attackers to obtain sensitive information. This is achieved by leveraging cleartext storage of the wireless key. Recommendations: For versions prior to 2.07.B01,...

PT-2018-4331 · D Link · Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue allows remote attackers to obtain sensitive information by leveraging cleartext storage of the administrative password. Recommendations: For versions prior to 2.07.B01, update t...

PT-2018-4329 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 versions prior to 2.07.B01 Description: The issue concerns the remote administration UI, allowing remote attackers to bypass intended access restrictions. Recommendations: For versions prior to 2.07.B01, update the firmware to...

PT-2018-4330 · D Link · D-Link Dir-815

Name of the Vulnerable Software and Affected Versions: D-Link DIR-815 devices with firmware prior to 2.07.B01 Description: A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that insert XSS sequences. Recommendations: For D-Link DIR-815 devices...

D-Link DIR-868L StarHub Firmware RCE Vulnerability

D-Link DIR-868L devices are prone to a pre-authenticated remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Code injection

authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code...

CVE-2018-9284

The CVE-2018-9284 entry concerns D-Link DIR-868L devices running Singapore StarHub firmware prior to version v1.21SHCb03. The vulnerability is tied to the authentication.cgi component and enables remote attackers to execute arbitrary code. The Red Hat and NVD records mirror this description; Open...

PT-2018-18960 · D Link · D-Link Dir-868L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-868L devices with Singapore StarHub firmware versions prior to v1.21SHCb03 Description: The issue allows remote attackers to execute arbitrary code on the affected devices. This is related to the authentication.cgi component...

Ruby Directory Traversal Vulnerability

Ruby is a simple and fast object-oriented object-oriented programming scripting language. Ruby suffers from a directory traversal vulnerability. The vulnerability occurs because the Dir.open, Dir.new, Dir.entries, and Dir.empty? methods do not check for null characters. An attacker can exploit th...