The vulnerability of D-Link DIR-601 router’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of D-Link DIR-601 router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

DEBIAN-CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

UBUNTU-CVE-2013-3564

The web interface in VideoLAN VLC media player before 2.0.7 has no access control which allows remote attackers to view directory listings via the 'dir' command or issue other commands without authenticating...

CVE-2013-7055

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...

CVE-2013-7054

D-Link DIR-100 4.03B07: cli.cgi XSS...

CVE-2013-7053

D-Link DIR-100 4.03B07: cli.cgi CSRF...

CVE-2013-7051

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...

Authorization

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...

Cross site request forgery (csrf)

D-Link DIR-100 4.03B07: cli.cgi CSRF...

Information disclosure

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...

Security feature bypass

D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...

Cross site scripting

D-Link DIR-100 4.03B07: cli.cgi XSS...

CVE-2013-7055

D-Link DIR-100 vulnerable on firmware 4.03B07 (hardware rev D1) to an information disclosure issue affecting PPTP and PoE data (CVE-2013-7055). This vulnerability is network-facing with risk of exposing sensitive information; vendor released a patched firmware (4.03B13) addressing the information...

CVE-2013-7055

D-Link DIR-100 4.03B07 has PPTP and poe information disclosure...

CVE-2013-7054

D-Link DIR-100 4.03B07: cli.cgi XSS...

CVE-2013-7054

CVE-2013-7054 affects D-Link DIR-100 with firmware 4.03B07 in the cli.cgi component, enabling Cross-Site Scripting (XSS). Public details from multiple sources confirm the issue and indicate a vendor fix to 4.03B13; applying the patched firmware is recommended. CVSS vectors show network-remote acc...

CVE-2013-7053

D-Link DIR-100 4.03B07: cli.cgi CSRF...

CVE-2013-7053

CVE-2013-7053 concerns a CSRF vulnerability in the CLI CGI endpoint (cli.cgi) of the D-Link DIR-100 router with firmware 4.03B07. The intrinsic cause is cross-site request forgery to that endpoint, enabling an attacker to induce state-changing requests without user interaction. Public references ...

CVE-2013-7052

D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...

CVE-2013-7052

CVE-2013-7052 affects D-Link DIR-100 with firmware 4.03B07, where an error in the cliget.cgi script enables a security bypass. The vulnerability is network-exposed, requires no authentication, and can grant elevated access due to improper validation. Red Hat/NVD/OpenVAS details align on the vulne...