10280 matches found
PT-2025-2005 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: The issue is related to the IP QoS Handler component of the D-Link DIR-816 A2 router's firmware, which is associated with inadequate access controls. This can be exploited by a...
D-Link DIR-823G security vulnerabilities
The D-Link DIR-823G is a wireless router that provides network connectivity and management for homes and small offices. The D-Link DIR-823G suffers from an improper access control vulnerability that originates in the Web Management Interface component's SetAutoRebootSettings, SetClientInfo,...
PT-2025-2006 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue has been found in the ACL Handler component, specifically affecting an unknown part of the file /goform/form2LocalAclEditcfg.cgi. This issue leads to improper acce...
PT-2024-10145 · D Link · D-Link Dir-816 A2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue is present in the D-Link DIR-816 A2, related to inadequate access controls in the /goform/form2NetSniper.cgi file. This can be exploited remotely by sending a...
PT-2025-2001 · D Link · D-Link Dir-816 A2
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue affects the unknown code of the file /goform/DDNS of the DDNS Service component, leading to improper access controls. The attack can be initiated remotely. The...
PT-2025-2004 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue has been found in the DHCPD Setting Handler component, specifically affecting an unknown functionality of the file /goform/form2Dhcpd.cgi. This issue leads to...
PT-2025-2002 · D Link · D-Link Dir-816
Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.10CNB05 R1B011D88210 Description: A critical issue has been found in the Virtual Service Handler component, affecting the file /goform/form2AddVrtsrv.cgi. This leads to improper access controls, allowing for remote...
PT-2025-3480 · D Link · D-Link Dir-825
Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 REVB version 2.03 Description: The issue concerns an OS command injection vulnerability in the CGl interface apc client pin.cgi, which allows remote attackers to execute arbitrary commands via the wps pin parameter passed to th...
SUSE CVE-2024-53177
In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to opencacheddir error paths If opencacheddir encounters an error parsing the lease from the server, the error handling may race with receiving a lease break, resulting in opencacheddir freeing the...
SUSE CVE-2024-53178
In the Linux kernel, the following vulnerability has been resolved: smb: Don't leak cfid when reconnect races with opencacheddir opencacheddir may either race with the tcon reconnection even before compoundsendrecv or directly trigger a reconnection via SMB2openinit or SMBqueryinfoinit. The...
DEBIAN-CVE-2024-53176
In the Linux kernel, the following vulnerability has been resolved: smb: During unmount, ensure all cached dir instances drop their dentry The unmount process cifskillsb calling closeallcacheddirs can race with various cached directory operations, which ultimately results in dentries not being...
CVE-2024-53177 smb: prevent use-after-free due to open_cached_dir error paths
In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to opencacheddir error paths If opencacheddir encounters an error parsing the lease from the server, the error handling may race with receiving a lease break, resulting in opencacheddir freeing the...
VulnCheck KEV: CVE-2024-33112
D-Link DIR-845L v1.01KRb03 and before is vulnerable to an operating system command injection vulnerability...
PT-2024-17591 · WordPress · Wp Data Access – App
Name of the Vulnerable Software and Affected Versions: WP Data Access – App, Table, Form and Chart Builder plugin versions up to, and including, 5.5.22 Description: The issue is related to SQL Injection via the orderuser logindir parameter due to insufficient escaping on the user-supplied paramet...
CVE-2024-12428: Improper Neutralization of Special Elements used in an SQL Command
The WP Data Access – App, Table, Form and Chart Builder plugin plugin for WordPress is vulnerable to SQL Injection via the 'orderuserlogindir' parameter in all versions up to, and including, 5.5.22 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
PT-2024-9920 · D Link · D-Link Dir-823G
Name of the Vulnerable Software and Affected Versions: D-Link DIR-823G version 1.0.2B05 20181207 Description: A critical issue affects the function SetAutoRebootSettings/SetClientInfo/SetDMZSettings/SetFirewallSettings/SetParentsControlInfo/SetQoSSettings/SetVirtualServerSettings of the file...
`rustix::fs::Dir` iterator with the `linux_raw` backend can cause memory explosion
...
CVE-2024-12635
The WP Docs plugin for WordPress is vulnerable to time-based SQL Injection via the 'dirid' parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
D-Link DIR-860L Denial of Service Vulnerability
The D-Link DIR-860L is a wireless router from China's AUO D-Link. The D-Link DIR-860L suffers from a denial of service vulnerability that originates from a null pointer dereference. An attacker can exploit this vulnerability to cause a denial of service...