10239 matches found
CVE-2013-7054
D-Link DIR-100 4.03B07: cli.cgi XSS...
CVE-2013-7051
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
CVE-2013-7053
D-Link DIR-100 4.03B07: cli.cgi CSRF...
Security feature bypass
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...
Authorization
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
Cross site request forgery (csrf)
D-Link DIR-100 4.03B07: cli.cgi CSRF...
Cross site scripting
D-Link DIR-100 4.03B07: cli.cgi XSS...
Information disclosure
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7055
D-Link DIR-100 vulnerable on firmware 4.03B07 (hardware rev D1) to an information disclosure issue affecting PPTP and PoE data (CVE-2013-7055). This vulnerability is network-facing with risk of exposing sensitive information; vendor released a patched firmware (4.03B13) addressing the information...
CVE-2013-7055
D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...
CVE-2013-7054
D-Link DIR-100 4.03B07: cli.cgi XSS...
CVE-2013-7054
CVE-2013-7054 affects D-Link DIR-100 with firmware 4.03B07 in the cli.cgi component, enabling Cross-Site Scripting (XSS). Public details from multiple sources confirm the issue and indicate a vendor fix to 4.03B13; applying the patched firmware is recommended. CVSS vectors show network-remote acc...
CVE-2013-7053
D-Link DIR-100 4.03B07: cli.cgi CSRF...
CVE-2013-7053
CVE-2013-7053 concerns a CSRF vulnerability in the CLI CGI endpoint (cli.cgi) of the D-Link DIR-100 router with firmware 4.03B07. The intrinsic cause is cross-site request forgery to that endpoint, enabling an attacker to induce state-changing requests without user interaction. Public references ...
CVE-2013-7052
D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...
CVE-2013-7052
CVE-2013-7052 affects D-Link DIR-100 with firmware 4.03B07, where an error in the cliget.cgi script enables a security bypass. The vulnerability is network-exposed, requires no authentication, and can grant elevated access due to improper validation. Red Hat/NVD/OpenVAS details align on the vulne...
CVE-2013-7051
CVE-2013-7051 affects D-Link DIR-100 with firmware 4.03B07. The issue is a security bypass in the cli.cgi module caused by failure to check authentication parameters, enabling unauthorized access through the CLI path. Public references describe multiple vulnerabilities for this device (CVE-2013-7...
CVE-2013-7051
D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...
D-Link DIR-859 ssdpcgi() M-SEARCH arbitrary command execution vulnerability (CNVD-2020-13686)
The D-Link DIR-859 is a router device. A security vulnerability exists in the D-Link DIR-859 ssdpcgi M-SEARCH method of handling, which can be exploited by remote attackers to submit a special request to execute arbitrary commands...
D-Link DIR-859 ssdpcgi() M-SEARCH arbitrary command execution vulnerability (CNVD-2020-13689)
The D-Link DIR-859 is a router device. A security vulnerability exists in the D-Link DIR-859 ssdpcgi M-SEARCH method handling, which can be exploited by remote attackers to submit a special request to execute arbitrary commands...