Lucene search
+L

50 matches found

OpenVAS
OpenVAS
added 2024/04/09 12:0 a.m.31 views

D-Link DNS/DNR Devices Multiple Vulnerabilities (SAP10383) - Active Check

Multiple D-Link DNS and DNR devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

10CVSS7AI score0.99997EPSS
Exploits25References6
Openbugbounty
Openbugbounty
added 2023/10/24 4:5 p.m.15 views

climateapps.dnr.state.mn.us Cross Site Scripting vulnerability OBB-3764839

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Openbugbounty
Openbugbounty
added 2023/09/10 5:55 p.m.10 views

dnrweb.dnr.state.md.us Cross Site Scripting vulnerability OBB-3664225

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
Exploits0
Citrix
Citrix
added 2023/05/20 12:0 a.m.9 views

Citrix Hypervisor Installation Fails: "This host does not appear to have any hard disks"

During CH8.2CU1 installation onSuperServer 210GP-DNR with local NVMe RAID1 configurated, local disks can not be found when selecting disk for vm data:...

7AI score
Exploits0
GithubExploit
GithubExploit
added 2023/04/23 8:42 p.m.656 views

Exploit for Download of Code Without Integrity Check in Dlink Dnr-322L_Firmware

CVE-2022-40799 Title: D-Link DNR-322L - Authenticated Remote...

8.8CVSS9.2AI score0.31328EPSS
Exploits3
0day.today
0day.today
added 2023/03/27 12:0 a.m.214 views

D-Link DNR-322L <=2.60B15 - Authenticated Remote Code Execution Exploit

Exploit Title: D-Link DNR-322L Exploit Writeup: https://lukasec.ch/posts/dlinkdnr322.html Vendor Homepage: https://dlink.com Vendor Advisory: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10305 Software Link: http://legacyfiles.us.dlink.com/DNR-322L/REVA/FIRMWARE...

6.8AI score
Exploits0
Exploit DB
Exploit DB
added 2023/03/25 12:0 a.m.150 views

D-Link DNR-322L &lt;=2.60B15 - Authenticated Remote Code Execution

Exploit Title: D-Link DNR-322L Exploit Writeup: https://lukasec.ch/posts/dlinkdnr322.html Vendor Homepage: https://dlink.com Vendor Advisory: https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10305 Software Link: http://legacyfiles.us.dlink.com/DNR-322L/REVA/FIRMWARE...

7.4AI score
Exploits0
CNVD
CNVD
added 2022/11/30 12:0 a.m.11 views

D-Link DNR-322L Command Injection Vulnerability

The D-Link DNR-322L is a surveillance memory from D-Link. A command injection vulnerability exists in D-Link DNR-322L version 2.60B15 and earlier, which stems from a data integrity failure in the backup configuration and can be exploited by an authenticated attacker to execute OS-level commands o...

8.8CVSS7.5AI score0.31328EPSS
Exploits3References1
NVD
NVD
added 2022/11/29 5:15 a.m.28 views

CVE-2022-40799

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

8.8CVSS0.31328EPSS
Exploits3References3
Prion
Prion
added 2022/11/29 5:15 a.m.29 views

Command injection

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

6.5CVSS8.8AI score0.31328EPSS
Exploits3References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/29 12:0 a.m.10 views

CVE-2022-40799

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

9AI score0.31328EPSS
Exploits3References1
Cvelist
Cvelist
added 2022/11/29 12:0 a.m.36 views

CVE-2022-40799

Data Integrity Failure in 'Backup Config' in D-Link DNR-322L = 2.60B15 allows an authenticated attacker to execute OS level commands on the device...

9.1AI score0.31328EPSS
Exploits3References1
CVE
CVE
added 2022/11/29 12:0 a.m.108 views

CVE-2022-40799

CVE-2022-40799 affects D-Link DNR-322L firmware, where a data integrity failure in the Backup Config feature (Version

8.8CVSS8.8AI score0.31328EPSS
In wildExploits3References3Affected Software1
CNNVD
CNNVD
added 2022/11/29 12:0 a.m.8 views

D-Link DNR-322L 安全漏洞

The D-Link DNR-322L is a surveillance memory from D-Link. A command injection vulnerability exists in D-Link DNR-322L version 2.60B15 and earlier, which stems from a data integrity failure in the backup configuration and can be exploited by an authenticated attacker to execute OS-level commands o...

8.8CVSS7.8AI score0.31328EPSS
Exploits3References2
Positive Technologies
Positive Technologies
added 2022/09/27 12:0 a.m.6 views

PT-2022-5875 · D Link · D-Link Dnr-322L

Name of the Vulnerable Software and Affected Versions: D-Link DNR-322L versions 2.60B15 and earlier Description: The issue is related to a data integrity failure in the 'Backup Config' feature, allowing an authenticated attacker to execute OS level commands on the device. This can be exploited by...

9CVSS8.8AI score0.31328EPSS
Exploits3References11
BDU FSTEC
BDU FSTEC
added 2017/09/15 12:0 a.m.6 views

The vulnerability of the check_login function in the D-Link DNR-326 router microprogramming system allows a hacker to bypass the authentication process.

The vulnerability of the checklogin function in the D–Link DNR-326 router microprogramming system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and register using the user’s cookie parameter...

10CVSS7.8AI score0.15165EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2017/08/25 6:29 p.m.21 views

CVE-2014-7858

The checklogin function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string...

10CVSS9.7AI score0.15165EPSS
Exploits0References5
Prion
Prion
added 2017/08/25 6:29 p.m.21 views

Authentication flaw

The checklogin function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string...

10CVSS7.6AI score0.15165EPSS
Exploits0References5Affected Software1
CVE
CVE
added 2017/08/25 6:0 p.m.55 views

CVE-2014-7858

The CVE-2014-7858 entry concerns D-Link DNR-326 prior to 2.10 build 03, where the check_login authentication flow is flawed. The weakness allows remote attackers to bypass authentication by manipulating the username cookie parameter, enabling login without proper credentials. Documented impact is...

10CVSS9.5AI score0.15165EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2017/08/25 6:0 p.m.35 views

CVE-2014-7857

D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgisetwto command in the c...

9.8AI score0.15165EPSS
Exploits0References5
Rows per page
Query Builder