10247 matches found
CVE-2020-8962
CVE-2020-8962 describes a stack-based buffer overflow in the D-Link DIR-842 REVC, caused by the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint (firmware v3.13B09 HOTFIX). The provided documents do not explicitly detail the impact beyond the overflow descriptio...
PT-2020-20399
Name of the Vulnerable Software and Affected Versions D-Link DIR-842 REVC version v3.13B09 HOTFIX Description A stack-based buffer overflow issue was discovered due to the use of strcpy for LOGINPASSWORD when handling a POST request to the "/MTFWU" endpoint. Recommendations For D-Link DIR-842 REV...
CVE-2020-8962: Out-of-bounds Write
A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...
The vulnerability of D-Link DIR-601 router’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges.
The vulnerability of D-Link DIR-601 router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
DEBIAN-CVE-2013-3564
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...
UBUNTU-CVE-2013-3564
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...
PT-2020-7095
Name of the Vulnerable Software and Affected Versions Joomla! version 1.6.0 Description The issue is related to SQL Injection via the filter order and filer order Dir parameters. This allows for potential exploitation. Recommendations For Joomla! version 1.6.0, consider restricting access to the...
CVE-2013-7054
D-Link DIR-100 4.03B07: cli.cgi XSS...
CVE-2013-7055
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7051
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
CVE-2013-7053
D-Link DIR-100 4.03B07: cli.cgi CSRF...
Security feature bypass
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...
Cross site request forgery (csrf)
D-Link DIR-100 4.03B07: cli.cgi CSRF...
Information disclosure
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
Cross site scripting
D-Link DIR-100 4.03B07: cli.cgi XSS...
Authorization
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
CVE-2013-7055
D-Link DIR-100 vulnerable on firmware 4.03B07 (hardware rev D1) to an information disclosure issue affecting PPTP and PoE data (CVE-2013-7055). This vulnerability is network-facing with risk of exposing sensitive information; vendor released a patched firmware (4.03B13) addressing the information...
CVE-2013-7055
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7054
CVE-2013-7054 affects D-Link DIR-100 with firmware 4.03B07 in the cli.cgi component, enabling Cross-Site Scripting (XSS). Public details from multiple sources confirm the issue and indicate a vendor fix to 4.03B13; applying the patched firmware is recommended. CVSS vectors show network-remote acc...