10335 matches found
CVE-2023-31814: Use of Incorrectly-Resolved Name or Reference
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
D-Link Multiple DIR Devices Multiple Vulnerabilities (Sep 2022)
Multiple D-Link DIR devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
D-Link DIR-300 security vulnerabilities
The D-Link DIR-300 is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-300 REVA1.06 and earlier firmware versions, REVB2.06 and earlier firmware versions, which originates from an easy file inclusion attack via /model/langmsg.php...
CVE-2023-31814
D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...
CVE-2023-31814
The CVE-2023-31814 entry concerns D-Link DIR-300 firmware and is tied to a file inclusion vulnerability in the script /model/__lang_msg.php. Affected devices are DIR-300 firmware versions <=REVA1.06 and
PT-2023-2983 · D Link · D-Link Dir-846
Name of the Vulnerable Software and Affected Versions: D-Link DIR-846 version 1.00A52 Description: The issue is related to the implementation of the HNAP1 protocol in the D-Link DIR-846 router's firmware, specifically concerning the handling of the tomography ping address parameter. This can be...
D-Link DIR-868L Router Command Execution
The vulnerability of the SetClientInfoDemo.php script in the D-Link DIR-868L router microprogramming software exists due to the failure to take measures to neutralize the special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute...
D-Link DIR-605L Stack Buffer Overflow Vulnerability
The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L version 1.17B01 BETA suffers from a stack buffer overflow vulnerability due to incorrect boundary checking in /goform/formTcpipSetup. An attacker could exploit this vulnerability to cause a buffer overflow and...
HNAP1 Protocol Code Execution
The vulnerability of the HNAP1 protocol implementation in D-Link DIR-2640-US router microprogramming software is related to the lack of measures to sanitize input data during the processing of the PrefixLen parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...
D-Link DIR-2640-US Code Execution
The vulnerability in the prog.cgi web interface for managing D-Link DIR-2640-US router microprogramming software relates to the escape of operations beyond the buffer in memory when checking the length of data entered by the user. Exploiting this vulnerability allows a remote attacker to execute...
D-Link DIR-822 Router Arbitrary Command Execution
The vulnerability of the SetQoSSettings.php script in D-Link DIR-822 router microprogramming software is related to insufficient checking of regular expressions during the processing of the uplink parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
D-Link DIR-2640-US Bypass Security Restrictions
The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming software is related to deficiencies in the authentication process when processing the LoginPassword parameter. Exploiting this vulnerability allows a malicious actor to bypass security restrictions by sending ...
D-Link DIR-819 Router Resource Leak DoS
The vulnerability of D-Link DIR-819 router’s microprogramming software is related to improper cleaning or freeing of resources. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending a specially crafted request from the...
D-Link DIR-2640-US Bypass Security Restrictions
The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming devices is related to deficiencies in the authentication process when processing requests containing XML elements. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions...
PT-2023-2929 · Piwigo · Piwigo
Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 13.6.0 Description: The issue is related to a lack of validation of XML object sequences in the user list backend.php script of the Piwigo content management system. This can be exploited by a remote attacker to condu...
CVE-2023-27233: Improper Neutralization of Special Elements used in an SQL Command
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order0dir parameter at userlistbackend.php...
D-Link Wi-Fi Router HNAP Protocol Code Execution
The vulnerability of the HNAP protocol implementation in D-Link Wi-Fi router software models such as DIR-867-US, DIR-878, and DIR-882-US lies in the ability to bypass authentication by using an alternative path or channel when processing HTTP requests that include the string “?GetCAPTCHAsetting”...
CVE-2023-27233
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order0dir parameter at userlistbackend.php...
D-Link DIR-822 Router SetWiFiVerifyAlpha.php Data Compromise
The vulnerability of the SetWiFiVerifyAlpha.php script of the D-Link DIR-822 router’s software lies in insufficient validation of arguments passed in the command when processing the WPSPIN parameter. Exploiting this vulnerability allows a remote attacker to compromise the integrity, availability,...
