Lucene search
+L

549 matches found

OSV
OSV
added 2017/04/10 2:59 p.m.5 views

CVE-2017-6190

Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to read arbitrary files via a .. dot dot in a "GET /uir/" request...

7.5CVSS5.9AI score0.15767EPSS
Exploits6References3
Cvelist
Cvelist
added 2017/04/10 2:0 p.m.34 views

CVE-2017-6190

Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to read arbitrary files via a .. dot dot in a "GET /uir/" request...

7.4AI score0.15767EPSS
Exploits6References3
CVE
CVE
added 2017/04/10 2:0 p.m.100 views

CVE-2017-6190

CVE-2017-6190 is a directory-traversal flaw in the D-Link DWR-116 web interface (and related DWR/DIR devices) that allows remote attackers to read arbitrary files by requesting a path like GET /uir/.. and similar. The root cause is an incorrect fix for a prior issue, enabling traversal in the web...

7.5CVSS7.3AI score0.15767EPSS
Exploits6References3Affected Software1
exploitpack
exploitpack
added 2017/04/07 12:0 a.m.67 views

D-Link DWR-116 DWR-116A1 - Arbitrary File Download

D-Link DWR-116 DWR-116A1 - Arbitrary File Download Title: D-Link DWR-116 Arbitrary File Download Vendor: D-Link www.dlink.com Affected models: DWR-116 / DWR-116A1 Tested on: V1.01EU, V1.00CPb10, V1.05AU CVE: CVE-2017-6190 Date: 04.07.2016 Author: Patryk Bogdan @patrykbogdan Description: D-Link...

5CVSS7.7AI score0.15767EPSS
Exploits6
Packet Storm
Packet Storm
added 2017/04/07 12:0 a.m.99 views

D-Link DWR-116 Directory Traversal

Title: D-Link DWR-116 Arbitrary File Download Vendor: D-Link www.dlink.com Affected models: DWR-116 / DWR-116A1 Tested on: V1.01EU, V1.00CPb10, V1.05AU CVE: CVE-2017-6190 Date: 04.07.2016 Author: Patryk Bogdan @patrykbogdan Description: D-Link DWR-116 with firmware before V1.05b09 suffers from...

0.1AI score0.15767EPSS
Exploits6
Hacker One
Hacker One
added 2017/03/20 5:51 a.m.122 views

U.S. Dept Of Defense: Default page exposes admin functions and all metods and classes available. on https://██████/█████/dwr/index.html

Summary: https://████/██████/dwr/index.html is a default installation page of DWR engine that exposes all classes and methods available to the user. Description: https://█████████/██████████/dwr/index.html is a default installation page of DWR engine that exposes all classes and methods available...

0.3AI score
Exploits0
CNVD
CNVD
added 2017/02/14 12:0 a.m.5 views

D-Link DWR-932B router vulnerable (CNVD-2017-01663)

D-Link DWR-932B router is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker can exploit the vulnerability to bypass authentication and perform unauthorized operations...

7.5CVSS7.1AI score0.04885EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/14 12:0 a.m.5 views

D-Link DWR-932B router vulnerable (CNVD-2017-01664)

D-Link DWR-932B router is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker could exploit the vulnerability to bypass security restrictions...

7.5CVSS6.9AI score0.04414EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/14 12:0 a.m.6 views

D-Link DWR-932B Router Information Disclosure Vulnerability

D-Link DWR-932B router is a wireless router product from AUO D-Link. An information disclosure vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker can exploit this vulnerability to obtain sensitive information...

7.5CVSS6.3AI score0.03859EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/14 12:0 a.m.6 views

D-Link DWR-932B Router Vulnerable

D-Link DWR-932B router is a wireless router product from AUO D-Link. A security vulnerability exists in the D-Link DWR-932B router using firmware version 02.02eu. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

10CVSS6.9AI score0.06932EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/06 12:0 a.m.30 views

D-Link DWR-932B Directory Traversal Vulnerability

The D-Link DWR-932B is a popular router device. A directory traversal vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability by submitting a special request to read the contents of an arbitrary file...

7.5CVSS7AI score0.05596EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/06 12:0 a.m.8 views

D-Link DWR-932B Security Bypass Vulnerability (CNVD-2017-01142)

The D-Link DWR-932B is a popular router device. A security vulnerability exists in the D-Link DWR-932B /var/miniupnpd.conf device, which allows remote attackers to bypass security restrictions and perform unauthorized operations...

7.5CVSS7AI score0.04174EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/06 12:0 a.m.28 views

D-Link DWR-932B Command Injection Vulnerability

The D-Link DWR-932B is a popular router device. An input validation vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary commands...

10CVSS7.5AI score0.09248EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/06 12:0 a.m.4 views

D-Link DWR-932B SHELL Command Execution Vulnerability

The D-Link DWR-932B is a popular router device. An input validation vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability to submit a special request to execute the command "/sbin/telnetd -l /bin/sh"...

10CVSS7.4AI score0.07307EPSS
Exploits1References1
CNVD
CNVD
added 2017/02/06 12:0 a.m.5 views

D-Link DWR-932B Security Bypass Vulnerability

The D-Link DWR-932B is a popular router device. A security vulnerability exists in the D-Link DWR-932B /var/miniupnpd.conf device, which allows remote attackers to bypass security restrictions and perform unauthorized operations...

7.5CVSS7AI score0.04174EPSS
Exploits1References1
OSV
OSV
added 2017/01/30 4:59 a.m.3 views

CVE-2016-10182

An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with characters...

9.8CVSS5.8AI score0.09248EPSS
Exploits1References2
Prion
Prion
added 2017/01/30 4:59 a.m.14 views

Design/Logic Flaw

An issue was discovered on the D-Link DWR-932B router. A securemode=no line exists in /var/miniupnpd.conf...

5CVSS7.1AI score0.04174EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2017/01/30 4:59 a.m.18 views

CVE-2016-10186

An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules...

7.5CVSS7.6AI score0.04174EPSS
Exploits1References2
NVD
NVD
added 2017/01/30 4:59 a.m.20 views

CVE-2016-10182

An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with characters...

10CVSS9.8AI score0.09248EPSS
Exploits1References2
OSV
OSV
added 2017/01/30 4:59 a.m.5 views

CVE-2016-10183

An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal...

7.5CVSS5.8AI score0.05596EPSS
Exploits1References2
Rows per page
Query Builder