Lucene search
+L

72 matches found

OSV
OSV
•added 2022/12/23 7:15 p.m.•14 views

CVE-2022-46568

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...

7.2CVSS5.8AI score0.01429EPSS
SaveExploits0References3
Prion
Prion
•added 2022/12/23 7:15 p.m.•34 views

Stack overflow

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...

5.8CVSS7.1AI score0.01429EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2022/12/23 12:00 a.m.•16 views

D-Link DIR-882 缓冲区错误漏洞

The D-Link DIR-882 is a wireless router from China-based AUO D-Link. The D-Link DIR-882 DIR882A1FW130B06 suffers from a buffer error vulnerability that stems from the discovery of a contained stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...

7.2CVSS7.7AI score0.01429EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2022/12/23 12:00 a.m.•38 views

CVE-2022-46568

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...

8AI score0.01429EPSS
SaveExploits0References3
CVE
CVE
•added 2022/12/23 12:00 a.m.•99 views

CVE-2022-46568

CVE-2022-46568 affects D-Link DIR-882 (DIR882A1_FW130B06) and DIR-878 (DIR_878_FW1.30B08). The root cause is a stack overflow in the SetSysEmailSettings module triggered by the AccountPassword parameter, exposing the devices to potential impact on confidentiality, integrity, and availability via ...

7.2CVSS7.7AI score0.01429EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/23 12:00 a.m.•2 views

CVE-2022-46568: Out-of-bounds Write

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...

7.2CVSS5.8AI score0.01429EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/11/21 12:00 a.m.•31 views

The vulnerability of the SetSysEmailSettings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the lack of measures taken to sanitize the input data entered by the user in the input field. Exploiting this vulnerability can allow a remote...

7.7CVSS7.1AI score0.01071EPSS
SaveExploits0References6Affected Software1
Zero Day Initiative
Zero Day Initiative
•added 2022/11/03 12:00 a.m.•46 views

D-Link DIR-1935 SetSysEmailSettings Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1935 routers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handli...

6.8CVSS3.3AI score0.01071EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/22 12:00 a.m.•17 views

PT-2022-5536 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Although authentication is required to exploit this issue, the existing authentication mechanism can b...

7.7CVSS6.9AI score0.01071EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2019/03/27 12:00 a.m.•17 views

The vulnerability of the SetSysEmailSettings() function in D-Link’s router software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings function in D-Link router software relates to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8AI score0.06408EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2019/02/13 3:29 a.m.•26 views

Command injection

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

9CVSS9.1AI score0.06408EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/13 12:00 a.m.•5 views

CVE-2019-8318: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

9CVSS6.5AI score0.06408EPSS
SaveExploits1References2
Rows per page
Query Builder