EUVD-2022-37481

D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte4C0160...

CVE-2022-34527

D-Link DSL-3782 v1.03 and below was discovered to contain a command injection vulnerability via the function byte4C0160...

CVE-2022-34527

The CVE-2022-34527 issue affects D-Link DSL-3782 (v1.03 and earlier). Multiple sources cite a command-injection vulnerability exposed via the function byte_4C0160, with root cause described as insufficient input/argument validation on CLI commands, enabling attacker-controlled command execution. ...

D-Link DSL-3782 缓冲区错误漏洞

The D-Link DSL-3782 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DSL-3782 suffers from a buffer overflow vulnerability that stems from a stack-based buffer overflow in the getAttrValue method. No detailed vulnerability details are provided at this time...

CVE-2022-32988

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

Cross site scripting

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

CVE-2022-32988

Cross Site Scripting XSS vulnerability in router Asus DSL-N14U-B1 1.1.2.3805 via the "list" parameters e.g. filterlwlist, keywordrulelist, etc in every ".asp" page containing a list of stored strings. The following asp files are affected: 1 cgi-bin/APPInstallation.asp, 2...

CVE-2022-32988

CVE-2022-32988 is an XSS vulnerability in Asus DSL-N14U-B1 firmware version 1.1.2.3_805. The issue arises in the web UI exposed through a large set of ASP pages that render lists of stored strings, where the *list parameters (examples: filter_lwlist, keyword_rulelist, etc) are not properly saniti...

PT-2022-4653 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 versions v1.03 and below Description: The issue is related to a stack overflow vulnerability in the getAttrValue function of the D-Link DSL-3782 router's firmware. Exploitation of this issue may allow an attacker to execute...

PT-2022-4735 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 versions 1.03 and below Description: The issue is related to a command injection vulnerability via the byte 4C0160 function. It is associated with insufficient argument validation for certain CLI commands, which can be exploit...

D-Link DSL-G2452DG has an unspecified vulnerability

The D-Link DSL-G2452DG is a router from D-Link China.A security vulnerability exists in the D-Link DSL-G2452DG, which stems from the fact that HW:T1＼tFW:ME2.00 contains insecure privileges. No detailed vulnerability details are currently available...

Sandbox bypass in ontrack Jenkins Plugin

A sandbox bypass vulnerability in Jenkins ontrack Plugin 3.4 and earlier allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM...

CVE-2022-28932

D-Link DSL-G2452DG HW:T1\tFW:ME2.00 was discovered to contain insecure permissions...

CVE-2022-28932

D-Link DSL-G2452DG HW:T1\tFW:ME2.00 was discovered to contain insecure permissions...

Design/Logic Flaw

D-Link DSL-G2452DG HW:T1\tFW:ME2.00 was discovered to contain insecure permissions...

CVE-2022-28932

CVE-2022-28932 affects the D-Link DSL-G2452DG router (firmware ME 2.00). The issue is insecure permissions in the implementation of the execute cmd.cgi script, which could allow an attacker to run arbitrary commands due to improper permission handling. The PT-2022-3217 entry documents this as a v...

CVE-2022-28932

D-Link DSL-G2452DG HW:T1\tFW:ME2.00 was discovered to contain insecure permissions...

ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +2013 more potentially affected by CVE-2017-17383 via org.jenkins-ci.main:jenkins-core (>=1.396 <=2.9)

org.jenkins-ci.main:jenkins-core MAVEN version =1.396, =1.1, =0.0.1, =1.0, =55.v51410e712e0c, =1.0, =0.0.1, =0.1.1, =0.1.0, =1.0, =0.9, =0.45 and more Source cves: CVE-2017-17383 Source advisory: OSV:GHSA-X3RC-CXV7-6XP6...

org.jenkins-ci.plugins:job-dsl (>=1.25 <=1.32) potentially affected by CVE-2018-1000151 via org.jenkins-ci.plugins:vsphere-cloud (=1.1.11)

org.jenkins-ci.plugins:vsphere-cloud MAVEN version =1.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:vsphere-cloud and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.25, =1.32 Source cves: CVE-2018-1000151 Source...

org.jenkins-ci.plugins:job-dsl (>=1.25 <=1.32) potentially affected by CVE-2018-1000153 via org.jenkins-ci.plugins:vsphere-cloud (=1.1.11)

org.jenkins-ci.plugins:vsphere-cloud MAVEN version =1.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:vsphere-cloud and may be impacted: - org.jenkins-ci.plugins:job-dsl =1.25, =1.32 Source cves: CVE-2018-1000153 Source...