Lucene search

K
DlinkDir-865l Firmware

16 matches found

CVE
CVE
added 2018/03/06 8:29 p.m.735 views

CVE-2018-6530

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110...

10CVSS9.8AI score0.9376EPSS
CVE
CVE
added 2019/12/30 5:15 p.m.440 views

CVE-2019-17621

The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network.

10CVSS9.3AI score0.93194EPSS
CVE
CVE
added 2020/01/02 2:16 p.m.102 views

CVE-2019-20213

D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php.

7.5CVSS7.3AI score0.00841EPSS
CVE
CVE
added 2020/06/03 5:15 p.m.77 views

CVE-2020-13782

D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection.

8.8CVSS8.7AI score0.17144EPSS
CVE
CVE
added 2020/06/03 5:15 p.m.77 views

CVE-2020-13786

D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF.

8.8CVSS8.7AI score0.00678EPSS
CVE
CVE
added 2019/10/25 4:15 p.m.76 views

CVE-2013-4856

D-Link DIR-865L has Information Disclosure.

6.5CVSS6.5AI score0.00229EPSS
CVE
CVE
added 2020/06/03 5:15 p.m.75 views

CVE-2020-13784

D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator.

7.5CVSS7.5AI score0.01066EPSS
CVE
CVE
added 2020/06/03 5:15 p.m.73 views

CVE-2020-13783

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information.

7.5CVSS7.6AI score0.00635EPSS
CVE
CVE
added 2020/06/03 5:15 p.m.67 views

CVE-2020-13787

D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information.

7.5CVSS7.6AI score0.00635EPSS
CVE
CVE
added 2018/03/06 8:29 p.m.45 views

CVE-2018-6528

XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted re...

6.1CVSS5.8AI score0.00632EPSS
CVE
CVE
added 2018/03/06 8:29 p.m.43 views

CVE-2018-6529

XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Tre...

6.1CVSS5.8AI score0.00632EPSS
CVE
CVE
added 2020/06/03 5:15 p.m.42 views

CVE-2020-13785

D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength.

7.5CVSS7.6AI score0.00342EPSS
CVE
CVE
added 2020/09/19 8:15 p.m.38 views

CVE-2020-25786

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet...

6.1CVSS6AI score0.00458EPSS
CVE
CVE
added 2018/03/06 8:29 p.m.37 views

CVE-2018-6527

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a craft...

6.1CVSS5.8AI score0.00632EPSS
CVE
CVE
added 2019/10/25 4:15 p.m.34 views

CVE-2013-4855

D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share.

8.8CVSS8.5AI score0.00299EPSS
CVE
CVE
added 2019/10/25 4:15 p.m.34 views

CVE-2013-4857

D-Link DIR-865L has PHP File Inclusion in the router xml file.

9.8CVSS9.4AI score0.01324EPSS