Lucene search
+L

10351 matches found

CNNVD
CNNVD
•added 2022/04/10 12:00 a.m.•20 views

D-Link DIR-619 buffer error vulnerability

D-Link DIR-619 is a series of routers from D-Link, a Chinese company. D-Link DIR-619 Ax v1.00 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via the curTime parameter...

7.5CVSS5.6AI score0.01471EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/04/10 12:00 a.m.•21 views

D-Link DIR-619 buffer error vulnerability

D-Link DIR-619 is a series of routers from D-Link, a Chinese company. D-Link DIR-619 Ax v1.00 has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via the curTime parameter...

7.8CVSS5.6AI score0.0152EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/10 12:00 a.m.•11 views

CVE-2022-27290: Out-of-bounds Write

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerability allows attackers to cause a Denial of Service DoS via the curTime parameter...

7.5CVSS7.2AI score0.01471EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/10 12:00 a.m.•10 views

CVE-2022-27293: Out-of-bounds Write

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Service DoS via the webpage parameter...

7.5CVSS7.2AI score0.02556EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/04/08 12:00 a.m.•42 views

D-Link DIR-823G Command Injection Vulnerability (CNVD-2022-38532)

D-Link DIR-823G is a wireless router from D-Link, a Taiwan-based company. D-Link DIR-823G is vulnerable to command injection, which can be exploited by attackers to achieve command injection...

9.8CVSS5.4AI score0.03126EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/08 12:00 a.m.•57 views

D-Link DIR-878 Command Injection Vulnerability (CNVD-2022-38533)

The D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company. The D-Link DIR-878 is vulnerable to a command injection vulnerability that could be exploited by an unauthenticated LAN attacker to execute arbitrary system commands to control the system or interrupt services...

8.8CVSS4.6AI score0.01549EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/04/07 10:15 p.m.•21 views

CVE-2021-43474

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

9.8CVSS7.3AI score0.03126EPSS
SaveExploits1References2
Prion
Prion
•added 2022/04/07 10:15 p.m.•32 views

Improper access control

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

7.5CVSS9.3AI score0.03126EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/04/07 9:02 p.m.•108 views

CVE-2021-43474

CVE-2021-43474 affects the D-Link DIR-823G REVA1 1.02B05 router. The issue is an access control vulnerability in the HNAP1 function, exploitable via any parameter. The CVSS data in the initial record shows high/critical impact (CVSS 2.0: base 7.5, Partial/Partial/Partial; CVSS 3.1: base 9.8, High...

9.8CVSS9.3AI score0.03126EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/04/07 9:02 p.m.•41 views

CVE-2021-43474

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

9.6AI score0.03126EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/07 7:15 p.m.•36 views

CVE-2022-26670

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

8.8CVSS0.01549EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/07 7:15 p.m.•35 views

Command injection

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

8.3CVSS9.3AI score0.01549EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/04/07 6:22 p.m.•120 views

CVE-2022-26670

CVE-2022-26670 concerns the D-Link DIR-878 wireless router. The vulnerability stems from inadequate filtering for special characters in a webpage input field, enabling an unauthenticated LAN attacker to perform a command injection and execute arbitrary system commands. The available connected sou...

8.8CVSS9.4AI score0.01549EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/07 6:22 p.m.•53 views

CVE-2022-26670 D-Link DIR-878 - Command Injection

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

8.8CVSS9.5AI score0.01549EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/07 12:00 a.m.•10 views

PT-2022-11852

Name of the Vulnerable Software and Affected Versions D-Link DIR-823G REVA1 version 1.02B05 Description An Access Control issue exists via any parameter in the HNAP1 function. Recommendations For D-Link DIR-823G REVA1 version 1.02B05, as a temporary workaround, consider restricting access to the...

9.8CVSS5.7AI score0.03126EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/07 12:00 a.m.•13 views

CVE-2021-43474: Improper Neutralization of Special Elements used in a Command

An Access Control vulnerability exists in D-Link DIR-823G REVA1 1.02B05 Lastest via any parameter in the HNAP1 function...

9.8CVSS8.2AI score0.03126EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/07 12:00 a.m.•20 views

D-Link DIR-823G command injection vulnerability

D-Link DIR-823G is a wireless router from D-Link, a Taiwan-based company. D-Link DIR-823G is vulnerable to command injection, which can be exploited by attackers to achieve command injection...

9.8CVSS5.6AI score0.03126EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/07 12:00 a.m.•6 views

CVE-2022-26670: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-878 has inadequate filtering for special characters in the webpage input field. An unauthenticated LAN attacker can perform command injection attack to execute arbitrary system commands to control the system or disrupt service...

8.8CVSS8.1AI score0.01549EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/04/07 12:00 a.m.•26 views

D-Link DIR-850 Router Redirection

The vulnerability of D-Link DIR-850 router’s microprogramming software is related to errors during the loading of configuration files. Exploiting this vulnerability can allow a malicious actor to redirect users to any desired URL address...

8.3CVSS7.2AI score0.31863EPSS
SaveExploits4References6
CNNVD
CNNVD
•added 2022/04/07 12:00 a.m.•20 views

D-Link DIR-878: Operating System Command Injection Vulnerability

The D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company. The D-Link DIR-878 is vulnerable to a command injection vulnerability that could be exploited by an unauthenticated LAN attacker to execute arbitrary system commands to control the system or interrupt services...

8.8CVSS6.1AI score0.01549EPSS
SaveExploits0References2
Rows per page
Query Builder