Lucene search
+L

8458 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:00 a.m.46 views

D-Link DIR-825/EE xupnpd Vimeo Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Vimeo plugin for the xupnpd service, which listens on TCP port...

8.8CVSS4.6AI score0.00962EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:00 a.m.41 views

D-Link DIR-825/EE xupnpd Dreambox Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for the xupnpd service, which listens on TCP por...

8.8CVSS4.3AI score0.00962EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.10 views

PT-2022-26989 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 versions 1.0.9/EE Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the Generic...

8.8CVSS8.8AI score0.01947EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.7 views

PT-2022-26988 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 1.0.9/EE Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the YouTube...

8.8CVSS8.8AI score0.00962EPSS
SaveExploits0References6
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:00 a.m.34 views

D-Link DIR-825/EE xupnpd IVI Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IVI plugin for the xupnpd service, which listens on TCP port 404...

8.8CVSS4.7AI score0.00962EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.12 views

PT-2022-26990 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 1.0.9/EE Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the Dreambox...

8.8CVSS8.8AI score0.00962EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.7 views

PT-2022-26993 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 versions 1.0.9/EE Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 routers. Authentication is not required to exploit this issue. The specific flaw...

8.8CVSS8.9AI score0.00962EPSS
SaveExploits0References5
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:00 a.m.47 views

D-Link DIR-825/EE xupnpd Upload Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044. The issue result...

8.8CVSS4.5AI score0.00962EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/12/28 12:00 a.m.43 views

D-Link DIR-825/EE xupnpd Generic Plugin Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Generic plugin for the xupnpd service, which listens on TCP port...

8.8CVSS4.3AI score0.01947EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.11 views

PT-2022-26991 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 1.0.9/EE Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the IVI plugi...

8.8CVSS8.8AI score0.00962EPSS
SaveExploits0References4
CNVD
CNVD
added 2022/12/27 12:00 a.m.43 views

D-Link DIR-882 Buffer Overflow Vulnerability

D-Link DIR-882 is a wireless router from China Youxun D-Link.D-Link DIR-882 DIR882A1FW130B06 has a security vulnerability that stems from a PSK parameter found through the SetQuickVPNSettings module that contains a stack overflow. No detailed vulnerability details are currently available...

7.2CVSS3.2AI score0.01414EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/12/27 12:00 a.m.37 views

D-Link DIR-846 Command Injection Vulnerability

D-Link DIR-846 is a wireless router from D-Link, a Chinese company. d-link DIR-846 A1FW100A43 has a security vulnerability that originates from the lan0dhcpsstaticlist parameter in the SetIpMacBindSettings function found to contain the command injection. No details of the vulnerability are...

9.9CVSS2.3AI score0.03081EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/12/27 12:00 a.m.50 views

D-Link DIR-882 Buffer Overflow Vulnerability (CNVD-2023-21659)

The D-Link DIR-882 is a wireless router from China Youxun D-Link.The D-Link DIR-882 is vulnerable to a buffer overflow vulnerability that originates from a discovery containing a stack overflow via the Key parameter in the SetWLanRadioSecurity module. No detailed vulnerability details are current...

7.2CVSS7.1AI score0.01645EPSS
SaveExploits0References1
OSV
OSV
added 2022/12/23 7:15 p.m.11 views

CVE-2022-46563

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module...

7.2CVSS5.8AI score0.01414EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/23 7:15 p.m.9 views

CVE-2022-46562

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module...

7.2CVSS5.8AI score0.01414EPSS
SaveExploits0References3
NVD
NVD
added 2022/12/23 7:15 p.m.24 views

CVE-2022-46562

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module...

7.2CVSS0.01414EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/23 7:15 p.m.8 views

CVE-2022-46568

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module...

7.2CVSS5.8AI score0.01414EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/23 7:15 p.m.3 views

CVE-2022-46566

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module...

7.2CVSS5.8AI score0.01414EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/23 7:15 p.m.8 views

CVE-2022-46569

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module...

7.2CVSS5.8AI score0.01645EPSS
SaveExploits0References3
OSV
OSV
added 2022/12/23 7:15 p.m.12 views

CVE-2022-46561

D-Link DIR-882 DIR882A1FW130B06, DIR-878 DIR878FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module...

7.2CVSS5.8AI score0.01445EPSS
SaveExploits0References5
Rows per page
Query Builder