CVE-2013-6811

Multiple cross-site request forgery CSRF vulnerabilities in the D-Link DSL-6740U gateway Rev. H1 allow remote attackers to hijack the authentication of administrators for requests that change administrator credentials or enable remote management services to 1 Custom Services in Port Forwarding, 2...

The vulnerability of D-Link DSL-2750U router microprogramming software, related to deficiencies in authentication procedures, allows attackers to trigger a service failure or disclose protected information.

The vulnerability of D-Link DSL-2750U router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose protected information...

D-Link DSL-2875AL Password Disclosure Vulnerability

D-Link DSL-2875AL is prone to a password disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A vulnerability has been identified in Apache Camel shipped with IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework (CVE-2019-0194)

Summary Apache Camel is shipped as a component of IBM Tivoli Netcool/OMNIbus Probe DSL Factory Framework. Information about security vulnerabilities affecting Apache Camel has been published. The Netcool/OMNIbus Probe DSL Factory Framework is a dependency of the following Netcool/OMNIbus...

D-Link DSL-2750U Authentication Bypass Vulnerability

The D-Link DSL-2750U is a wireless router from AUO D-Link of Taiwan, China. An authentication bypass vulnerability exists in the D-Link DSL-2750U version 1.11. An attacker can exploit this vulnerability to cause a denial of service and disclose information...

D-Link DSL-2750U Authentication Bypass Vulnerability

The D-Link DSL-2750U is a wireless router from AUO D-Link of Taiwan, China. An authentication bypass vulnerability exists in the login form in the D-Link DSL-2750U using firmware version 1.11. An attacker could exploit this vulnerability to cause a denial of service and disclose information...

CVE-2019-1010155

D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually...

Authentication flaw

DISPUTED D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't...

CVE-2019-1010155

D-Link DSL-2750U 1.11 is affected by: Authentication Bypass. The impact is: denial of service and information leakage. The component is: login. NOTE: Third parties dispute this issues as not being a vulnerability because although the wizard is accessible without authentication, it can't actually...

CVE-2019-1010155

CVE-2019-1010155 affects D-Link DSL-2750U firmware 1.11. The issue is an authentication bypass in the login component, with stated impacts of denial of service and information leakage. Some sources (including third parties) dispute the vulnerability’s severity/impact, noting the wizard is accessi...

PT-2019-3274 · D Link · D-Link Dsl-2750U

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2750U version 1.11 Description: The issue is related to deficiencies in the authentication procedure of the D-Link DSL-2750U router's firmware. It may allow a remote attacker to cause a denial of service or disclose protected...

CVE-2019-12845

The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3...

Code injection

The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3...

CVE-2019-12845

CVE-2019-12845 affects JetBrains TeamCity. The generated Kotlin DSL settings allowed artifacts to be resolved over an unencrypted connection, exposing potential MITM risks. Root cause: unencrypted artifact resolution in Kotlin DSL settings. Impact: exposure of artifact resolution traffic (no deta...

CVE-2019-12845

The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3...

Sandbox Protection Bypass

Jenkins Job DSL Plugin is vulnerable to sandbox protection bypass vulnerability. This exists in the job-dsl-core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy and job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy and...

PT-2019-11708 · Jenkins · Jenkins Ontrack Jenkins Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ontrack Plugin versions 3.4 and earlier Description: A sandbox bypass issue in the Jenkins ontrack Plugin allowed attackers with control over ontrack DSL definitions to execute arbitrary code on the Jenkins master JVM. Recommendations...

jenkins-job-dsl-plugin: Script security sandbox bypass in Job DSL Plugin (SECURITY-1342)

A flaw was found in the Jenkins Job DSL plugin. Parsing, compilation, and script instantiations provided by a crafted Groovy script could escape the sandbox allowing users to execute arbitrary code on the Jenkins master. The highest risk from this vulnerability is to data confidentiality and...

D-Link DSL-3782 Cross-Site Scripting Vulnerability

The D-Link DSL-3782 is a wireless router from AUO D-Link of Taiwan, China. A cross-site scripting vulnerability exists in the web interface of the D-Link DSL-3782 using firmware version 1.01, which stems from the lack of proper validation of client data by the WEB application. An attacker could...

CVE-2018-17990

An issue was discovered on D-Link DSL-3782 devices with firmware 1.01. An OS command injection vulnerability in Acl.asp allows a remote authenticated attacker to execute arbitrary OS commands via the ScrIPaddrEndTXT parameter...