10246 matches found
PT-2020-20399
Name of the Vulnerable Software and Affected Versions D-Link DIR-842 REVC version v3.13B09 HOTFIX Description A stack-based buffer overflow issue was discovered due to the use of strcpy for LOGINPASSWORD when handling a POST request to the "/MTFWU" endpoint. Recommendations For D-Link DIR-842 REV...
CVE-2020-8962: Out-of-bounds Write
A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD when handling a POST request to the /MTFWU endpoint...
The vulnerability of D-Link DIR-601 router’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges.
The vulnerability of D-Link DIR-601 router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
DEBIAN-CVE-2013-3564
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...
UBUNTU-CVE-2013-3564
The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...
PT-2020-7095
Name of the Vulnerable Software and Affected Versions Joomla! version 1.6.0 Description The issue is related to SQL Injection via the filter order and filer order Dir parameters. This allows for potential exploitation. Recommendations For Joomla! version 1.6.0, consider restricting access to the...
CVE-2013-7055
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7054
D-Link DIR-100 4.03B07: cli.cgi XSS...
CVE-2013-7051
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
CVE-2013-7053
D-Link DIR-100 4.03B07: cli.cgi CSRF...
Security feature bypass
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...
Cross site request forgery (csrf)
D-Link DIR-100 4.03B07: cli.cgi CSRF...
Cross site scripting
D-Link DIR-100 4.03B07: cli.cgi XSS...
Authorization
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
Information disclosure
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7055
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7055
D-Link DIR-100 vulnerable on firmware 4.03B07 (hardware rev D1) to an information disclosure issue affecting PPTP and PoE data (CVE-2013-7055). This vulnerability is network-facing with risk of exposing sensitive information; vendor released a patched firmware (4.03B13) addressing the information...
CVE-2013-7054
CVE-2013-7054 affects D-Link DIR-100 with firmware 4.03B07 in the cli.cgi component, enabling Cross-Site Scripting (XSS). Public details from multiple sources confirm the issue and indicate a vendor fix to 4.03B13; applying the patched firmware is recommended. CVSS vectors show network-remote acc...