8448 matches found
CVE-2020-13782
CVE-2020-13782 affects D-Link DIR-865L Ax, firmware 1.20B01 Beta. The flaw is a command injection vulnerability in the router’s web interface, centered on the cgibin.exe controller. A crafted request (e.g., to scandir.sgi) can cause arbitrary code execution with administrative privileges. The thr...
CVE-2020-13783
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information...
CVE-2020-13783
CVE-2020-13783 affects the D-Link DIR-865L Ax firmware 1.20B01 Beta. The root cause is cleartext storage of sensitive information in the device, enabling information disclosure if storage is accessed. Multiple sources (CNVD, Red Hat) classify this as an information disclosure vulnerability. No re...
CVE-2020-13784
CVE-2020-13784 concerns the D-Link DIR-865L Ax router with firmware 1.20B01 Beta, where the pseudo-random number generator uses a predictable seed. The connected CNVD entry confirms a security feature issue vulnerability for the same device/firmware, citing the easily guessable PRNG seed as the u...
CVE-2020-13784
D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator...
CVE-2020-13785
CVE-2020-13785 affects D-Link DIR-865L Ax with firmware 1.20B01 Beta. The vulnerability is described as Inadequate Encryption Strength in the device’s SharePort/Web access context, impacting confidentiality. Affected version is explicitly 1.20B01 Beta; CVSS v3.1 base score is 7.5 (HIGH). Connecte...
CVE-2020-13785
D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength...
CVE-2020-13786
CVE-2020-13786 refers to a CSRF vulnerability in D-Link DIR-865L Ax, version 1.20B01 Beta. Root cause per CNVD: failure to properly validate user input in the router’s web interface, enabling cross-site requests to perform unauthorized operations. Related material notes a possible path for sessio...
CVE-2020-13786
D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF...
CVE-2020-13787
D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information...
CVE-2020-13787
CVE-2020-13787 affects D-Link DIR-865L Ax devices with firmware 1.20B01 Beta, where sensitive information can be disclosed due to cleartext transmission over the network. The connected sources describe an information-disclosure vulnerability and a potential for attackers to sniff traffic to obtai...
PT-2020-2910 · D Link · D-Link Dir-865L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L versions 1.20B01 Description: The issue is related to inadequate encryption strength in the SharePort Web Access component of the D-Link DIR-865L router's firmware. This could allow a remote attacker to bypass existing securit...
PT-2020-2908 · D Link · D-Link Dir-865L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L Ax version 1.20B01 Beta Description: The issue exists due to the lack of neutralization of special elements used in the operating system command. This allows a remote attacker to execute arbitrary operating system commands. Th...
PT-2020-6975 · Audacity +5 · Audacity +5
Name of the Vulnerable Software and Affected Versions: Audacity versions 2.3.3 and earlier Description: The issue is related to the default permission settings in Audacity. When Audacity creates temporary files, it saves them to /var/tmp/audacity-$USER and sets the permissions to 755. This allows...
Updated php packages fix security vulnerability
Updated php packages fix security vulnerabilities: - Fixed bug 78875 Long filenames cause OOM and temp files are not cleaned. 1 - Fixed bug 78876 Long variables in multipart/form-data cause OOM and temp files are not cleaned. 2 - Fixed bug 79441 Segfault in mbchr if internal encoding is...
D-Link DIR-859 Remote Code Execution (CVE-2019-20215)
A remote code execution vulnerability exists in D-Link DIR-859. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
DEBIAN-CVE-2020-8034
Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting XSS vulnerability via the HTTP GET dir parameter in the browser functionality, affecting breadcrumb output. An attacker can obtain access to a victim's webma...
CVE-2020-8034
CVE-2020-8034 affects Gollem before 3.0.13 (used in Horde Groupware Webmail Edition 5.2.22 and other products). The vulnerability is a reflected XSS via the HTTP GET dir parameter in the browser functionality, impacting breadcrumb output. Exploitation can lead to an attacker gaining access to a v...
Unspecified Vulnerability in D-Link DIR-615
The D-Link DIR-615 is a wireless router from AUO D-Link of Taiwan, China. A security vulnerability exists in the login page of the D-Link DIR-615 T1 version 20.10. A remote attacker can exploit the vulnerability to bypass the CAPTCHA protection mechanism and conduct a brute force attack...
