CVE-2019-13128

An issue was discovered on D-Link DIR-823G devices with firmware 1.02B03. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the IPAddress or Gateway field to SetStaticRouteSettings...

CVE-2019-13482

An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 exploitable with Authentication via shell metacharacters in the Type field to SetWanSettings...

CVE-2019-13563

D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console...

CVE-2019-10040

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use a hidden API URL /goform/SystemCommand to execute a system command without authentication...

CVE-2019-10891

An issue was discovered in D-Link DIR-806 devices. There is a command injection in function hnapmain, which calls system without checking the parameter that can be controlled by user, and finally allows remote attackers to execute arbitrary shell commands with a special HTTP header...

CVE-2013-4856

D-Link DIR-865L has Information Disclosure...

CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...

CVE-2009-3347

Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However,...

CVE-2002-2192

Cross-site scripting XSS vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via 1 a Host: header when DNS wildcards are supported or 2 the query string in a "dir" request to indexed folders...

SUSE CVE-2025-37954

In the Linux kernel, the following vulnerability has been resolved: smb: client: Avoid race in opencacheddir with lease breaks A pre-existing valid cfid returned from findorcreatecacheddir might race with a lease break, meaning opencacheddir doesn't consider it valid, and thinks it's...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the smb client opencacheddir competing with a lease interrupt...

D-Link DIR-605L sysCmd Parameter Command Injection Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a command injection vulnerability that stems from the parameter sysCmd failing to properly filter constructed command special characters, commands, and so on. No details of the vulnerability are...

D-Link DIR-619L formSetWizard2 function buffer overflow vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the formSetWizard2 function curTime parameter failing to correctly validate the length size of the input data, which can be exploited by an...

D-Link DIR-619L wake_on_lan Function Command Injection Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the wakeonlan function mac parameter failing to correctly filter constructed command special characters, commands, and so on. No details of the...

D-Link DIR-605L formSetWAN_Wizard55 Function Buffer Overflow Vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a buffer overflow vulnerability that stems from the formSetWANWizard55 function parameter curTime failing to correctly validate the length and size of the input data, which can be exploited by an...

D-Link DIR-619L formSysCmd Function Command Injection Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a command injection vulnerability that stems from the formSysCmd function sysCmd parameter failing to properly filter construct command special characters, commands, etc. No details of the...

D-Link DIR-619L formSetWAN_Wizard52 Function Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the formSetWANWizard52 function curTime parameter failing to correctly validate the length size of the input data, which can be exploited by an...

D-Link DIR-619L formEasySetupWizard function buffer overflow vulnerability

The D-Link DIR-619L is a wireless router from China's AUO D-Link. The D-Link DIR-619L suffers from a buffer overflow vulnerability that originates from the curTime parameter of the formEasySetupWizard function failing to properly validate the length of the input data, which can be exploited by an...

D-Link DIR-605L mac parameter command injection vulnerability

The D-Link DIR-605L is a wireless router from China's AUO D-Link. The D-Link DIR-605L suffers from a command injection vulnerability that stems from the parameter mac failing to properly filter constructed command special characters, commands, and more. No details of the vulnerability are provide...

D-Link DIR-300 Multiple Vulnerabilities (2011 - 2024)

D-Link DIR-300 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...