1133 matches found
CVE-2019-19222
The CVE-2019-19222 vulnerability affects the D-Link DSL-2680 (Firmware EU_1.03). A Stored XSS exists in the web admin interface: an authenticated attacker can inject arbitrary JavaScript into info.html by sending a crafted Forms/wireless_autonetwork_1 POST request. Impact is exposure of script ex...
PT-2020-10105 · D Link · D-Link Dsl-2680
Name of the Vulnerable Software and Affected Versions: D-Link DSL-2680 version EU 1.03 Description: A Broken Access Control issue in the web administration interface allows an attacker to enable or disable MAC address filtering by submitting a crafted "Forms/WlanMacFilter 1" POST request without...
PT-2020-10102 · D Link · D-Link Dsl-2680
Name of the Vulnerable Software and Affected Versions: D-Link DSL-2680 version EU 1.03 Description: A Broken Access Control issue in the web administration interface allows an attacker to reboot the router by submitting a "reboot.html" GET request without being authenticated on the admin interfac...
dsl-warehouse.com Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3712 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting dsl-warehouse.com website and its users. Following...
PT-2020-10103 · D Link · D-Link Dsl-2680
Name of the Vulnerable Software and Affected Versions: D-Link DSL-2680 version EU 1.03 Description: A Broken Access Control issue in the web administration interface allows an attacker to download configuration settings by submitting a "rom-0" GET request without authentication on the admin...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DSL-6740U gateway Rev. H1 allow remote attackers to hijack the authentication of administrators for requests that change administrator credentials or enable remote management services to 1 Custom Services in Port Forwarding, 2...
CVE-2013-6811
Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DSL-6740U gateway Rev. H1 allow remote attackers to hijack the authentication of administrators for requests that change administrator credentials or enable remote management services to 1 Custom Services in Port Forwarding, 2...
CVE-2013-6811
The CVE affects the D-Link DSL-6740U gateway (Rev. H1); multiple CSRF vulnerabilities allow remote attackers to hijack administrator sessions and perform changes to (1) Custom Services in Port Forwarding, (2) Port Triggering Entries, (3) URL Filters in Parental Control, (4) Print Server settings,...
The vulnerability of D-Link DSL-2750U router microprogramming software, related to deficiencies in authentication procedures, allows attackers to trigger a service failure or disclose protected information.
The vulnerability of D-Link DSL-2750U router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose protected information...
D-Link DSL-2875AL Password Disclosure Vulnerability
D-Link DSL-2875AL is prone to a password disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: A vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework (CVE-2019-0194)
Summary Apache Camel is shipped as a component of IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework. Information about security vulnerabilities affecting Apache Camel has been published. The Netcool/OMNIbus Probe DSL Factory Framework is a dependency of the following Netcool/OMNIbus...
D-Link DSL-2750U Authentication Bypass Vulnerability
The D-Link DSL-2750U is a wireless router from AUO D-Link of Taiwan, China. An authentication bypass vulnerability exists in the D-Link DSL-2750U version 1.11. An attacker can exploit this vulnerability to cause a denial of service and disclose information...
D-Link DSL-2750U Authentication Bypass Vulnerability
The D-Link DSL-2750U is a wireless router from AUO D-Link of Taiwan, China. An authentication bypass vulnerability exists in the login form in the D-Link DSL-2750U using firmware version 1.11. An attacker could exploit this vulnerability to cause a denial of service and disclose information...
CVE-2019-1010155
D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually...
Authentication flaw
DISPUTED D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't...
CVE-2019-1010155
D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually...
CVE-2019-1010155
CVE-2019-1010155 affects D-Link DSL-2750U firmware 1.11. The issue is an authentication bypass in the login component, with stated impacts of denial of service and information leakage. Some sources (including third parties) dispute the vulnerability’s severity/impact, noting the wizard is accessi...
PT-2019-3274 · D Link · D-Link Dsl-2750U
Name of the Vulnerable Software and Affected Versions: D-Link DSL-2750U version 1.11 Description: The issue is related to deficiencies in the authentication procedure of the D-Link DSL-2750U router's firmware. It may allow a remote attacker to cause a denial of service or disclose protected...