Lucene search
+L

1125 matches found

Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.7 views

PT-2025-7108 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version 1.01 Description: An OS command injection issue was discovered, allowing attackers to execute arbitrary operating system commands via crafted packets. This is achieved through the samba wg and samba nbn parameters...

8CVSS8.4AI score0.0094EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2025/02/04 12:0 a.m.7 views

PT-2025-7105 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version 1.01 Description: A buffer overflow issue was discovered, triggered by the destination, netmask, and gateway parameters, allowing attackers to cause a Denial of Service DoS via a crafted packet. Recommendations: For...

5.7CVSS7.2AI score0.00315EPSS
SaveExploits0References7
VulnCheck KEV
VulnCheck KEV
added 2025/01/28 12:0 a.m.5 views

VulnCheck KEV: CVE-2024-40890

Multiple Zyxel DSL CPE devices contain a post-authentication command injection vulnerability in the CGI program that could allow an authenticated attacker to execute OS commands via a crafted HTTP request...

8.8CVSS5.9AI score0.22251EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/27 12:0 a.m.6 views

PT-2025-12358

Name of the Vulnerable Software and Affected Versions D-Link DSL-3788 revA1 version 1.01R1B036 EU EN Description The issue is related to a buffer overflow that can occur through the COMM MAKECustomMsg function of the webproc cgi. This function is part of the web procedure and can be exploited,...

7.8CVSS5.7AI score0.00747EPSS
SaveExploits0References10
NVD
NVD
added 2025/01/22 8:15 p.m.36 views

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

5.7CVSS0.00292EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/22 12:0 a.m.9 views

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DSL-3782 v1.01, which stems from the failure of /NewGUI/ParentalControl.asp to correctly validate the length and size of the input data, and can be exploited by a remote...

5.7CVSS8.1AI score0.00292EPSS
SaveExploits0References2
CVE
CVE
added 2025/01/22 12:0 a.m.60 views

CVE-2024-56914

CVE-2024-56914 affects the D-Link DSL-3782 v1.01. A buffer overflow in the web interface file /New_GUI/ParentalControl.asp stems from improper validation of input data length/size, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service. Several connected sou...

5.7CVSS7.1AI score0.00292EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/22 12:0 a.m.7 views

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

5.6AI score0.00292EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/22 12:0 a.m.32 views

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

0.00292EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.8 views

The vulnerability of the “set Diagnostics_Entry” function in D-Link DSL-3782 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the “set DiagnosticsEntry” function in D-Link DSL-3782 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.4AI score0.0686EPSS
SaveExploits2References2Affected Software1
OSV
OSV
added 2024/11/14 4:8 p.m.14 views

USN-7110-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - HW tracing; - ISDN/mISDN subsystem; - Media drivers; - Network drivers; - SCSI drivers; - USB...

7.8CVSS6.7AI score0.00622EPSS
SaveExploits1References21
BDU FSTEC
BDU FSTEC
added 2024/11/06 12:0 a.m.7 views

The vulnerability of the /etc/defnodes/S30setnode.sh component of D-Link DSL-6740C router software allows a hacker to increase their privileges.

The vulnerability of the /etc/defnodes/S30setnode.sh component of D-Link DSL-6740C router software is related to the use of weak password requirements. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

8.8CVSS5.4AI score0.00889EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/30 12:0 a.m.8 views

PT-2024-7559 · D Link · D-Link Dsl-6740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL-6740C version 6.TR069.20211230 Description: The issue is related to the use of weak password requirements in the D-Link DSL-6740C router's software component. This could allow a remote attacker to escalate their privileges. The...

8.8CVSS8.3AI score0.00889EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
added 2024/10/29 12:0 a.m.13 views

The vulnerabilities of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, DSL/Ethernet CPE routers allow attackers to cause service interruptions.

The vulnerability of microprogrammed software in Wi-Fi transceivers, Wi-Fi amplifiers, Fiber ONTs, and DSL/Ethernet CPE routers lies in the fact that the operation data is exposed beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS5.7AI score0.00431EPSS
SaveExploits0References3
CNVD
CNVD
added 2024/10/13 12:0 a.m.10 views

D-Link DSL-2750U Cross-Site Scripting Vulnerability

The D-Link DSL-2750U is a wireless router from China-based AUO D-Link. The D-Link DSL-2750U R5B017 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter PortMappingDescription, which can be exploited b...

6.1CVSS6.3AI score0.00637EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/10 3:15 p.m.30 views

CVE-2024-9792

A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely...

6.1CVSS0.00637EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/10/10 3:0 p.m.19 views

CVE-2024-9792 D-Link DSL-2750U Port Forwarding Page cross site scripting

A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely...

5.1CVSS3.5AI score0.00637EPSS
SaveExploits0References4
CVE
CVE
added 2024/10/10 3:0 p.m.59 views

CVE-2024-9792

CVE-2024-9792 affects the D-Link DSL-2750U R5B017, specifically the Port Forwarding Page. The vulnerability arises from improper handling of the PortMappingDescription parameter, enabling cross-site scripting (XSS) which can be triggered remotely. Several connected sources (CNVD/CNNVD/NVD entries...

6.1CVSS4AI score0.00637EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2024/10/10 3:0 p.m.43 views

CVE-2024-9792 D-Link DSL-2750U Port Forwarding Page cross site scripting

A vulnerability classified as problematic has been found in D-Link DSL-2750U R5B017. This affects an unknown part of the component Port Forwarding Page. The manipulation of the argument PortMappingDescription leads to cross site scripting. It is possible to initiate the attack remotely...

5.1CVSS0.00637EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/08/05 12:0 a.m.11 views

The vulnerability of D-Link DSL-225 router’s microprogramming software, related to bypassing the authentication process, allows attackers to circumvent the authentication mechanism.

The vulnerability of D-Link DSL-225 router microprogramming software is related to the bypassing of the authentication process. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process...

10CVSS5.5AI score0.00661EPSS
SaveExploits0References3
Rows per page
Query Builder