21609 matches found
The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows a hacker to gain unauthorized access to protected information.
The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows an attacker to gain unauthorized access to protected information when processing the $file parameter. Exploiting this vulnerability can enable a remote attacker to obtain unauthorized access to...
RHEL 7 : glib2 (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - glib2: NULL pointer dereference in gmarkupparsecontextendparse function in gmarkup.c CVE-2018-16428 - GNO...
RHEL 6 : keepalived (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - keepalived: Heap-based buffer overflow when parsing HTTP status codes allows for denial of service or...
CVE-2024-33774
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetupWizard allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...
CVE-2024-33774
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetupWizard allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...
CVE-2024-33774
Summary: CVE-2024-33774 describes a buffer overflow in D-Link DIR-619L Rev.B firmware 2.06B1,.path /bin/boa via the formWlanSetup_Wizard parameter “webpage,” enabling remote authenticated users to trigger a DoS. Affected product: D-Link DIR-619L router (firmware 2.06B1). Root cause: insufficient ...
CVE-2024-33773
CVE-2024-33773 maps to a buffer overflow in /bin/boa on D-Link DIR-619L Rev.B 2.06B1, exploitable via the formWlanGuestSetup function and the webpage parameter. This allows remote authenticated users to trigger a DoS. Root cause is a memory corruption in the /bin/boa binary within the affected fi...
CVE-2024-33773
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...
CVE-2024-33772
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "curTime."...
CVE-2024-33772
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial of service DoS through the parameter "curTime."...
CVE-2024-33772
CVE-2024-33772 describes a buffer overflow in D-Link DIR-619L Rev.B 2.06B1 firmware, triggered by the curTime parameter in /bin/boa via formTcpipSetup, leading to DoS for remote authenticated users. Multiple sources (NVD/NVD-derived CVE list, Red Hat advisory, CNVD/CNNVD entries, and OpenVAS/deta...
CVE-2024-33771
A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial of service DoS through the parameter "webpage."...
CVE-2024-33771
CVE-2024-33771 affects D-Link DIR-619L Rev.B (firmware 2.06B1). A buffer overflow in the /bin/boa component via the goform/formWPS endpoint can be triggered by crafting the webpage parameter, allowing remote authenticated users to cause a denial-of-service. The entry does not provide a published ...
CVE-2024-4699 D-Link DAR-8000-10 importhtml.php deserialization
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...
CVE-2024-4699 D-Link DAR-8000-10 importhtml.php deserialization
UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...
CVE-2024-4699
Summary (CVE-2024-4699): D-Link DAR-8000-10 (up to 20230922) is affected by a deserialization vulnerability in the /importhtml.php endpoint. The issue arises from manipulating the sql parameter, enabling remote code execution through unsafe deserialization. This vulnerability is documented across...
Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24417)
The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 that stems from a lack of authentication in the DDP Settings SSID list. No details of the vulnerability are provided at this time...
PT-2024-32324 · D Link · D-Link Dar-8000-10
Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000-10 up to 20230922 Description: A critical issue has been found in the processing of the file /importhtml.php, where the manipulation of the sql argument leads to deserialization. This issue can be exploited remotely. The produ...
D-Link DIR-845L Command Execution Vulnerability
The D-Link DIR-845L is a wireless router from China-based AUO D-Link. The D-Link DIR-845L suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request...
Unspecified Vulnerability in D-Link DAP-2622 (CNVD-2024-24414)
The D-Link DAP-2622 is a wireless access point Access Point device from China's D-Link. A security vulnerability exists in the D-Link DAP-2622 due to a stack-based buffer overflow remote code execution vulnerability in the IPv6 address of the DDP firmware update server. An attacker could exploit...