Lucene search
+L

10241 matches found

NVD
NVD
•added 2021/08/10 8:15 p.m.•34 views

CVE-2021-29296

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vctwan; the sbin/httpd would invoke the strchr function and take NULL as a first argument,...

7.5CVSS0.01127EPSS
SaveExploits0References2
Prion
Prion
•added 2021/08/10 8:15 p.m.•27 views

Null pointer dereference

UNSUPPORTED WHEN ASSIGNED Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vctwan; the sbin/httpd would invoke the strchr function and take...

5CVSS7.4AI score0.01127EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/08/10 8:15 p.m.•9 views

CVE-2021-29296

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vctwan; the sbin/httpd would invoke the strchr function and take NULL as a first argument,...

7.5CVSS7AI score0.01127EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2021/08/10 7:52 p.m.•18 views

CVE-2021-29296

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vctwan; the sbin/httpd would invoke the strchr function and take NULL as a first argument,...

6.8AI score0.01127EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/08/10 7:52 p.m.•61 views

CVE-2021-29296

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vctwan; the sbin/httpd would invoke the strchr function and take NULL as a first argument,...

7.6AI score0.01127EPSS
SaveExploits0References2
CVE
CVE
•added 2021/08/10 7:52 p.m.•85 views

CVE-2021-29296

D-Link DIR-825, firmware 2.10b02 (Rev B or earlier), contains a NULL pointer dereference in the web server when handling requests to /vct_wan (or /vct wan), leading to a segmentation fault and remote denial of service. OpenVAS notes this as a NULL pointer dereference affecting DIR-825 Rev B

7.5CVSS7.4AI score0.01127EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2021/08/10 12:00 a.m.•14 views

PT-2021-18163 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 2.10b02 Description: The issue is a Null Pointer Dereference vulnerability that could allow a remote malicious user to cause a denial of service. This can be triggered by sending an HTTP request with the URL /vct wan,...

7.5CVSS6.9AI score0.01127EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/10 12:00 a.m.•3 views

CVE-2021-29296: NULL Pointer Dereference

Null Pointer Dereference vulnerability in D-Link DIR-825 2.10b02, which could let a remote malicious user cause a denial of service. The vulnerability could be triggered by sending an HTTP request with URL /vctwan; the sbin/httpd would invoke the strchr function and take NULL as a first argument,...

7.5CVSS6AI score0.01127EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/10 12:00 a.m.•17 views

D-Link DIR-825 代码问题漏洞

The D-Link DIR-825 is a router from D-Link, a Taiwan-based company. A security vulnerability exists in the D-Link DIR-825 2.10b02, which can be exploited by attackers to cause a denial of service on related devices...

7.5CVSS5.7AI score0.01127EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/08/10 12:00 a.m.•18 views

The vulnerability of the web interface of D-Link router microprogramming software, including models D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web interface of D-Link router microprogramming software, such as D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows an attacker to...

10CVSS8.4AI score0.5432EPSS
SaveExploits1References5Affected Software6
OSV
OSV
•added 2021/08/06 12:15 p.m.•15 views

CVE-2021-37388

A buffer overflow in D-Link DIR-615 C2 3.03WW. The pingipaddr parameter in pingresponse.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution...

9.8CVSS6.3AI score0.0374EPSS
SaveExploits1References2
NVD
NVD
•added 2021/08/06 12:15 p.m.•47 views

CVE-2021-37388

A buffer overflow in D-Link DIR-615 C2 3.03WW. The pingipaddr parameter in pingresponse.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution...

9.8CVSS0.0374EPSS
SaveExploits1References2
Prion
Prion
•added 2021/08/06 12:15 p.m.•31 views

Buffer overflow

A buffer overflow in D-Link DIR-615 C2 3.03WW. The pingipaddr parameter in pingresponse.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution...

7.5CVSS9.9AI score0.0374EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/08/06 12:15 p.m.•10 views

CVE-2021-37388

A buffer overflow in D-Link DIR-615 C2 3.03WW. The pingipaddr parameter in pingresponse.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution...

9.8CVSS7.7AI score0.0374EPSS
SaveExploits1References3
CVE
CVE
•added 2021/08/06 11:22 a.m.•102 views

CVE-2021-37388

CVE-2021-37388 affects the D-Link DIR-615 C2 router (firmware 3.03WW). A buffer overflow in the ping_ipaddr parameter of the ping_response.cgi POST request allows an attacker to crash the webserver and may enable remote code execution. The connected documents confirm the component and root cause ...

9.8CVSS10AI score0.0374EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/08/06 11:22 a.m.•63 views

CVE-2021-37388

A buffer overflow in D-Link DIR-615 C2 3.03WW. The pingipaddr parameter in pingresponse.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution...

10AI score0.0374EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/08/06 12:00 a.m.•4 views

PT-2021-21628

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 C2 version 3.03WW Description A buffer overflow issue exists, allowing an attacker to potentially crash the webserver and gain remote code execution by exploiting the ping ipaddr parameter in the "ping response.cgi" POST request...

9.8CVSS6.4AI score0.0374EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/06 12:00 a.m.•7 views

CVE-2021-37388: Buffer Copy without Checking Size of Input

A buffer overflow in D-Link DIR-615 C2 3.03WW. The pingipaddr parameter in pingresponse.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution...

9.8CVSS6.4AI score0.0374EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/08/06 12:00 a.m.•30 views

D-Link DIR-615 安全漏洞

The D-Link DIR-615 is a wireless router from D-Link, a Taiwan-based company. The security vulnerability in the D-Link DIR-615 stems from a network system or product that does not properly validate data boundaries when performing operations on memory, resulting in incorrect read and write operatio...

9.8CVSS6.1AI score0.0374EPSS
SaveExploits1References3
Mend
Mend
•added 2021/08/05 8:38 p.m.•2 views

CVE-2021-20116

A reflected cross-site scripting vulnerability exists in TCExam = 14.8.4. The paths provided in the f, d, and dir parameters in tceselectmediafile.php were not properly validated and could cause reflected XSS via the unsanitized output of the path supplied. An attacker could craft a malicious lin...

6.1CVSS0.00937EPSS
SaveExploits1References1
Rows per page
Query Builder