Lucene search
+L

17640 matches found

CNVD
CNVD
added 2025/10/30 12:00 a.m.7 views

D-Link DIR600L formWlSiteSurvey Function Buffer Overflow Vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which originates fr...

7.5CVSS7.3AI score0.00348EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/30 12:00 a.m.12 views

D-Link DIR600L formAdvFirewall Function Buffer Overflow Vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which is caused by...

7.5CVSS7.3AI score0.00348EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/30 12:00 a.m.14 views

D-Link DIR600L formSetDomainFilter Function Buffer Overflow Vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which originates fr...

7.5CVSS7.3AI score0.00348EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/30 12:00 a.m.24 views

D-Link DIR600L formEasySetTimezone function buffer overflow vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. A buffer overflow vulnerability exists in the D-Link DIR600L, which is caused by the...

7.5CVSS7.3AI score0.00348EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/10/30 12:00 a.m.8 views

D-Link DIR600L formVirtualServ Function Buffer Overflow Vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which originates fr...

7.5CVSS7.3AI score0.00348EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.27 views

PT-2025-47045

Name of the Vulnerable Software and Affected Versions D-Link DIR-816L version 2 06 b09 beta Description A stack-based buffer overflow exists in the scandir main function of the /portal/ ajax exporer.sgi file. This flaw can be exploited remotely. The argument en can be manipulated to trigger the...

9CVSS8.9AI score0.0082EPSS
SaveExploits1References13
CNVD
CNVD
added 2025/10/30 12:00 a.m.28 views

D-Link DIR600L formTcpipSetup Function Buffer Overflow Vulnerability

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which originates fr...

7.5CVSS7.3AI score0.00348EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/29 9:30 p.m.11 views

EUVD-2018-21606

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

9.3CVSS7.4AI score0.09806EPSS
SaveExploits1References6
NVD
NVD
added 2025/10/29 7:15 p.m.11 views

CVE-2018-25120

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

9.8CVSS0.09806EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/29 7:15 p.m.13 views

CVE-2018-25120

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

9.8CVSS5.8AI score0.09806EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/29 6:39 p.m.41 views

CVE-2018-25120

The CVE-2018-25120 entry concerns D-Link DNS-343 ShareCenter devices (firmware ≤ 1.05). The vulnerability is a command injection in the Mail Test feature: the web maintenance script posts to /goform/Mail_Test and feeds multiple form parameters directly into a system email utility without input va...

9.8CVSS7.6AI score0.09806EPSS
SaveIn wildExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/29 6:39 p.m.4 views

CVE-2018-25120 D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

9.3CVSS7.6AI score0.09806EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/29 6:39 p.m.31 views

CVE-2018-25120 D-Link DNS-343 ShareCenter <= 1.05 Command Injection via /goform/Mail_Test

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

9.3CVSS0.09806EPSS
SaveExploits1References5
VulnCheck KEV
VulnCheck KEV
added 2025/10/29 12:00 a.m.14 views

VulnCheck KEV: CVE-2018-25120

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/MailTest' and uses several form parameters directly in a call t...

9.8CVSS6AI score0.09806EPSS
SaveIn wildExploits1References128
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.13 views

PT-2025-44344

D-Link DNS-343 ShareCenter devices running firmware versions up to and including 1.05 contain a command injection vulnerability in the Mail Test functionality. The web maintenance script posts to the internal goForm endpoint '/goform/Mail Test' and uses several form parameters directly in a call ...

9.3CVSS7.9AI score0.09806EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/10/29 12:00 a.m.12 views

D-Link DNS-343 ShareCenter 安全漏洞

The D-Link DNS-343 ShareCenter is a network storage device from China's AUO D-Link. The D-Link DNS-343 ShareCenter suffers from a command execution vulnerability that stems from insufficient input validation in the Mail Test feature, which can be exploited by an attacker to execute arbitrary...

9.8CVSS6.2AI score0.09806EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2025/10/29 12:00 a.m.15 views

The vulnerability of the formSetQoS() function in D-Link DIR600L router software allows a hacker to trigger a service failure.

The vulnerability of the formSetQoS function in D-Link DIR600L router software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

7.8CVSS7.3AI score0.00432EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/10/28 9:01 p.m.12 views

CVE-2025-12313

A vulnerability has been found in D-Link DI-7001 MINI 19.09.19A1/24.04.18B1. The affected element is an unknown function of the file /mspinfo.htm. Such manipulation of the argument cmd leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public an...

9.8CVSS6.9AI score0.03956EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 4:54 p.m.10 views

CVE-2025-12295

A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature are...

8.1CVSS6.8AI score0.00411EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/28 4:54 p.m.7 views

CVE-2025-12296

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be...

9.8CVSS7AI score0.07031EPSS
SaveExploits1References1
Rows per page
Query Builder