CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

CVE-2020-13785

CVE-2020-13785 affects D-Link DIR-865L Ax with firmware 1.20B01 Beta. The vulnerability is described as Inadequate Encryption Strength in the device’s SharePort/Web access context, impacting confidentiality. Affected version is explicitly 1.20B01 Beta; CVSS v3.1 base score is 7.5 (HIGH). Connecte...

CVE-2020-13785

D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...

CVE-2020-13786

D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF...

CVE-2020-13786

CVE-2020-13786 refers to a CSRF vulnerability in D-Link DIR-865L Ax, version 1.20B01 Beta. Root cause per CNVD: failure to properly validate user input in the router’s web interface, enabling cross-site requests to perform unauthorized operations. Related material notes a possible path for sessio...

CVE-2020-13787

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...

CVE-2020-13787

CVE-2020-13787 affects D-Link DIR-865L Ax devices with firmware 1.20B01 Beta, where sensitive information can be disclosed due to cleartext transmission over the network. The connected sources describe an information-disclosure vulnerability and a potential for attackers to sniff traffic to obtai...

PT-2020-2911

Name of the Vulnerable Software and Affected Versions D-Link DIR-865L Ax version 1.20B01 Beta Description The issue is related to the cleartext transmission of sensitive information and a vulnerability in the adv gzone.php component of the D-Link DIR-865L router's firmware, which is associated wi...

PT-2020-2908 · D Link · D-Link Dir-865L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L Ax version 1.20B01 Beta Description: The issue exists due to the lack of neutralization of special elements used in the operating system command. This allows a remote attacker to execute arbitrary operating system commands. Th...

PT-2020-2910 · D Link · D-Link Dir-865L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L versions 1.20B01 Description: The issue is related to inadequate encryption strength in the SharePort Web Access component of the D-Link DIR-865L router's firmware. This could allow a remote attacker to bypass existing securit...

CVE-2020-13786: Cross-Site Request Forgery (CSRF)

D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF...

CVE-2020-13784: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...

PT-2020-2912

Name of the Vulnerable Software and Affected Versions D-Link DIR-865L Ax version 1.20B01 Beta Description The issue is related to a predictable seed in a Pseudo-Random Number Generator, specifically in the get random string function of the D-Link DIR-865L router's firmware. This is caused by erro...

CVE-2020-13783: Cleartext Storage of Sensitive Information

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information...

CVE-2020-13785: Inadequate Encryption Strength

D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...

CVE-2020-13782: Improper Neutralization of Special Elements used in an OS Command

D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection...

PT-2020-2913

Name of the Vulnerable Software and Affected Versions D-Link DIR-865L Ax version 1.20B01 Beta Description The issue is related to the cleartext storage of sensitive information in the D-Link DIR-865L Ax router's firmware. This is due to a lack of protection for service data in the tools admin.php...

CVE-2020-13787: Cleartext Transmission of Sensitive Information

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...

PT-2020-6975 · Audacity +5 · Audacity +5

Name of the Vulnerable Software and Affected Versions: Audacity versions 2.3.3 and earlier Description: The issue is related to the default permission settings in Audacity. When Audacity creates temporary files, it saves them to /var/tmp/audacity-$USER and sets the permissions to 755. This allows...

Updated php packages fix security vulnerability

Updated php packages fix security vulnerabilities: - Fixed bug 78875 Long filenames cause OOM and temp files are not cleaned. 1 - Fixed bug 78876 Long variables in multipart/form-data cause OOM and temp files are not cleaned. 2 - Fixed bug 79441 Segfault in mbchr if internal encoding is...