Lucene search
K

141 matches found

Positive Technologies
Positive Technologies
added 2025/07/25 12:0 a.m.5 views

PT-2025-30946 · D Link · D-Link Di-8400

Name of the Vulnerable Software and Affected Versions: D-Link DI-8400 version 16.07.26A1 Description: A vulnerability exists in the jhttpd component of the software. The manipulation of the share enable argument in the usb paswd.asp file leads to a null pointer dereference. This issue can be...

7.1CVSS6.4AI score0.00795EPSS
Exploits1References8
CNVD
CNVD
added 2025/07/23 12:0 a.m.2 views

D-Link DI-8100 Buffer Overflow Vulnerability

The D-Link DI-8100 is an enterprise-class router from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from an insufficient checksum of parameter mx in the sprintf function in the /ddns.asp?opt=add file of component jhttpd. The vulnerability can b...

9CVSS8.2AI score0.00733EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/07/22 9:7 p.m.5 views

CVE-2025-7908

A vulnerability was found in D-Link DI-8100 1.0. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file /ddns.asp?opt=add of the component jhttpd. The manipulation of the argument mx leads to stack-based buffer overflow. The attack can be launched...

9CVSS7.4AI score0.00733EPSS
Exploits1References1
OSV
OSV
added 2025/07/20 11:15 p.m.3 views

CVE-2025-7911

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnpctrl.asp of the component jhttpd. The manipulation of the argument removeextproto/removeextport leads to stack-based buffer overflow. The attack can be initiate...

9.8CVSS6.4AI score0.00865EPSS
Exploits0References6
CVE
CVE
added 2025/07/20 10:32 p.m.15 views

CVE-2025-7911

D-Link DI-8100 1.0 is affected by a stack-based buffer overflow in the jhttpd component (sprintf in /upnp_ctrl.asp). The issue results from improper handling of the remove_ext_proto/remove_ext_port parameters, enabling remote exploitation. Public exploits have been disclosed. No patch/version inf...

9.8CVSS8.8AI score0.00865EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2025/07/20 10:32 p.m.7 views

CVE-2025-7911 D-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflow

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnpctrl.asp of the component jhttpd. The manipulation of the argument removeextproto/removeextport leads to stack-based buffer overflow. The attack can be initiate...

9CVSS0.00865EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/07/20 10:32 p.m.3 views

CVE-2025-7911 D-Link DI-8100 jhttpd upnp_ctrl.asp sprintf stack-based overflow

A vulnerability classified as critical was found in D-Link DI-8100 1.0. This vulnerability affects the function sprintf of the file /upnpctrl.asp of the component jhttpd. The manipulation of the argument removeextproto/removeextport leads to stack-based buffer overflow. The attack can be initiate...

9CVSS8.9AI score0.00865EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2025/07/20 9:2 p.m.3 views

CVE-2025-7908 D-Link DI-8100 jhttpd ddns.asp sprintf stack-based overflow

A vulnerability was found in D-Link DI-8100 1.0. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file /ddns.asp?opt=add of the component jhttpd. The manipulation of the argument mx leads to stack-based buffer overflow. The attack can be launched...

9CVSS8.9AI score0.00733EPSS
Exploits1References5
CVE
CVE
added 2025/07/20 9:2 p.m.16 views

CVE-2025-7908

CVE-2025-7908 affects D-Link DI-8100 v1.0 (jhttpd) with a stack-based overflow in sprintf() for /ddns.asp?opt=add via the mx argument. Exploitation is remote and payloads have been disclosed; CVSS indicates HIGH risk. There is no publicly available fix version information in the provided document...

9CVSS7.3AI score0.00733EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/07/20 9:2 p.m.5 views

CVE-2025-7908 D-Link DI-8100 jhttpd ddns.asp sprintf stack-based overflow

A vulnerability was found in D-Link DI-8100 1.0. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file /ddns.asp?opt=add of the component jhttpd. The manipulation of the argument mx leads to stack-based buffer overflow. The attack can be launched...

9CVSS0.00733EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/07/20 12:0 a.m.2 views

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from the improper handling of the parameters removeextproto/removeextport by the sprintf function in the /upnpctrl.asp file of the...

9.8CVSS8.2AI score0.00865EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/07/20 12:0 a.m.2 views

D-Link DI-8100 安全漏洞

The D-Link DI-8100 is an enterprise-class router from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from an insufficient checksum of parameter mx in the sprintf function in the /ddns.asp?opt=add file of component jhttpd. The vulnerability can b...

9CVSS8.1AI score0.00733EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/07/18 12:0 a.m.2 views

PT-2025-30223 · D Link · Di-8100 +1

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 1.0 Description: A critical vulnerability exists in the sprintf function within the jhttpd component of D-Link DI-8100 version 1.0. Manipulation of the remove ext proto/remove ext port argument in the /upnp ctrl.asp fil...

9.8CVSS8.6AI score0.00865EPSS
Exploits0References15
Positive Technologies
Positive Technologies
added 2025/07/18 12:0 a.m.2 views

PT-2025-30219 · D Link · Di-8100

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 1.0 Description: A critical issue exists in the D-Link DI-8100 device. The sprintf function within the /ddns.asp?opt=add file, part of the jhttpd component, is susceptible to a stack-based buffer overflow. Manipulation ...

9CVSS8.7AI score0.00733EPSS
Exploits1References14
CNVD
CNVD
added 2025/07/14 12:0 a.m.1 views

D-Link DI-500WF Buffer Overflow Vulnerability

D-Link DI-500WF is a panel type wireless AP access point, designed with international wireless standards, supporting 2.4GHz band, wireless transmission speed up to 300Mbps, in line with the green concept. A buffer overflow vulnerability exists in the D-Link DI-500WF. The vulnerability stems from...

9CVSS7.6AI score0.0076EPSS
Exploits1References1
OSV
OSV
added 2025/07/08 9:15 p.m.1 views

CVE-2025-7194

A vulnerability was found in D-Link DI-500WF 17.04.10A1T. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file ipposition.asp of the component jhttpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launch...

8.7CVSS6.3AI score0.0076EPSS
Exploits1References5
CVE
CVE
added 2025/07/08 8:32 p.m.16 views

CVE-2025-7194

CVE-2025-7194 affects D-Link DI-500WF (version 17.04.10A1T). The vulnerability resides in the jhttpd component’s file ip_position.asp where unvalidated input to the sprintf call leads to a stack-based buffer overflow. It is exploitable remotely over the network and an exploit has been publicly di...

9CVSS8.9AI score0.0076EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/08 8:32 p.m.2 views

CVE-2025-7194 D-Link DI-500WF jhttpd ip_position.asp sprintf stack-based overflow

A vulnerability was found in D-Link DI-500WF 17.04.10A1T. It has been declared as critical. Affected by this vulnerability is the function sprintf of the file ipposition.asp of the component jhttpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be launch...

9CVSS7.3AI score0.0076EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/07/08 12:0 a.m.2 views

D-Link DI-500WF 安全漏洞

D-Link DI-500WF is a panel type wireless AP access point, designed with international wireless standards, supporting 2.4GHz band, wireless transmission speed up to 300Mbps, in line with the green concept. A buffer overflow vulnerability exists in the D-Link DI-500WF. The vulnerability stems from...

9CVSS8.9AI score0.0076EPSS
Exploits1References6
RedhatCVE
RedhatCVE
added 2025/07/02 2:3 a.m.7 views

CVE-2025-6881

A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoebase.asp of the component jhttpd. The manipulation of the argument mschapen leads to buffer overflow. The attack may be launched remotely. Th...

9CVSS7.3AI score0.00833EPSS
Exploits1References1
Rows per page
Query Builder