9 matches found
D-Link GO-RT-AC750 操作系统命令注入漏洞
The D-Link GO-RT-AC750 is a wireless dual-band simple router from China AUO D-Link. A security vulnerability exists in the D-Link GO-RT-AC750 revAv101b03 version, which originates from the parameter service of genacgimain containing command injection...
D-Link DIR-882 Rev. A <= 1.30B06 Multiple Vulnerabilities
D-Link DIR-882 Rev. A devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-14413
D-Link DIR-850L REV. A with firmware through FW114WWb07h2abbeta1 devices have XSS in the action parameter to htdocs/web/wpsacts.php...
CVE-2017-14423
CVE-2017-14423 affects D-Link DIR-850L REV. A devices (firmware FW114WWb07_h2ab_beta1 and earlier). The vulnerability resides in the htdocs/parentalcontrols/bind.php file, where unauthenticated nonce-guessing could allow remote attackers to change DNS configuration by sending a sequence of reques...
CVE-2017-14415
Summary of CVE-2017-14415 : A cross-site scripting (XSS) vulnerability exists in D-Link DIR-850L REV. A devices (firmware up to FW114WWb07_h2ab_beta1) in the action parameter of htdocs/web/sitesurvey.php. The root cause is unsanitized input for the action parameter, enabling an attacker to inject...
PT-2017-13467 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue allows remote attackers to change the DNS configuration via a series of requests, due to the failure to prevent unauthenticated nonce-guessing attacks in the...
PT-2017-13466 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the use of a hardcoded private key in the /etc/stunnel.key file across different installations,...
D-Link DIR-615 Hardware rev D3 / DIR-300 - Hardware rev A - Multiple Vulnerabilities
No description provided by source...
CVE-2000-1139
The CVE-2000-1139 entry concerns Microsoft Exchange 2000 prior to Rev. A, where installation creates a user account with a known password. This enables potential privilege elevation (privileges granted to the created account) as described in the description. The NVD metrics assign a CVSSv2 base s...