PT-2023-5411 · D Link · D-Link Dir-823G

Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2B05 Description: The issue is related to a stack overflow in the SetWifiDownSettings function of the D-Link DIR-823G router's firmware, which can be exploited by a remote attacker to impact the confidentiality,...

PT-2023-5415 · D Link · D-Link Dir-806

Name of the Vulnerable Software and Affected Versions: D-LINK DIR-806 versions DIR806A1 FW100CNb11 Description: The issue is related to a lack of proper data cleaning at the management level, which can be exploited by a remote attacker to execute arbitrary commands using the HTTP ST parameter. Th...

PT-2023-5372 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 Description: A stack overflow issue was discovered in the form2Dhcpip.cgi component of the D-Link DIR-816 A2 router's firmware. This issue is related to a buffer overflow in memory and can be exploited via...

PT-2023-5373 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 Description: The issue is related to a stack overflow in the showMACfilterMAC function of the D-Link DIR-816 A2 router's firmware, which can be exploited via the flag 5G parameter. This could allow a remote...

D-LINK DIR-806 Command Injection Vulnerability

The D-Link DIR-806 is a wireless router from China-based AUO D-Link. A security vulnerability exists in DIR806A1FW100CNb11 in the D-LINK DIR-806 1200M11AC, which stems from a poor filtering of the HTTPST parameter, making it susceptible to command injection attacks...

D-Link DIR-816 A2 Buffer Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2 v1.10CNB05, which originates from a discovery containing a stack overflow via the parameter statuscheckpppoeuser of dirsetWanWifi...

D-Link DIR-823G Buffer Error Vulnerability

The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G v1.0.2B05, which originates from a discovery containing a stack overflow via the parameters StartTime and EndTime of SetWifiDownSettings...

D-Link DIR-816 A2 Buffer Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2 v1.10CNB05, which stems from a parameter macCloneMac found to contain a stack overflow via setMAC...

D-Link DIR-823G Buffer Error Vulnerability

The D-Link DIR-823G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-823G v1.0.2B05, which stems from a parameter TXPower and GuardInt found to contain a stack overflow via SetWLanRadioSecurity...

D-Link DIR-816 A2 Buffer Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2 v1.10CNB05, which stems from the discovery of a contained stack overflow via the parameter removeRuleList of form2IPQoSTcDel...

D-Link DIR-816 A2 Buffer Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2 v1.10CNB05, which stems from a parameter nvmacaddr found to contain a stack overflow via form2Dhcpip.cgi...

CVE-2023-43236: Out-of-bounds Write

D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dirsetWanWifi...

CVE-2023-43240

CVE-2023-43240 affects D-Link DIR-816 A2 firmware v1.10CNB05, where a stack overflow can be triggered via the sip_address parameter in ipportFilter. The vulnerability is network-exploitable with no authentication or user interaction required, and the CVSS metrics indicate HIGH impact on confident...

CVE-2023-43242

CVE-2023-43242 affects D-Link DIR-816 A2 (firmware v1.10CNB05). A stack overflow exists in the form2IPQoSTcDel function via the removeRuleList parameter, exposing potential impact to confidentiality, integrity, and availability. Public references confirm a remote-triggerable flaw without explicit...

PT-2023-5376 · D Link · D-Link Dir-816 A2

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 Description: The issue is related to a stack overflow in the form2IPQoSTcDel function via the removeRuleList parameter. This can allow a remote attacker to impact the confidentiality, integrity, and...

D-Link DIR-645 Router Privilege Bypass

The vulnerability of the phpcgimain function in D-Link DIR-645 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions and gain increased privileges...

Temporary plugin file created with insecure permissions

Jenkins creates a temporary file when a plugin is deployed directly from a URL. Jenkins 2.423 and earlier, LTS 2.414.1 and earlier creates this temporary file in the system temporary directory with the default permissions for newly created files. If these permissions are overly permissive, they m...

PT-2023-7761 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the graphtemplates.php script in Nagios XI, which is vulnerable due to errors in handling the dir parameter. This can allow a remote attacker to read, modify, or...

PT-2023-5736 · D Link · D-Link Dir-846

Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version 100A53DBR-Retail Description: The issue is related to the lack of protection of the web page structure when handling the QoS POST parameter, allowing a remote attacker to execute arbitrary code. This can be achieved...

D-Link DIR-619L /bin/mini_upnpd Buffer Overflow Vulnerability

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from improper inpu...