Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
d-link vulnerabilities and exploits
(subscribe to this query)
10
CVSSv2
CVE-2014-7858
The check_login function in D-Link DNR-326 prior to 2.10 build 03 allows remote malicious users to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.
D-link Dnr-326 Firmware
5
CVSSv2
CVE-2002-1068
The web server for D-Link DP-300 print server allows remote malicious users to cause a denial of service (hang) via a large HTTP POST request.
D-link Dp-303
10
CVSSv2
CVE-2019-7297
An issue exists on D-Link DIR-823G devices with firmware up to and including 1.02B03. A command Injection vulnerability allows malicious users to execute arbitrary OS commands via shell metacharacters in a crafted /HNAP1 request. This occurs when the GetNetworkTomographyResult fu...
D-link Dir-823g Firmware
7.5
CVSSv2
CVE-2019-6258
D-Link DIR-822 Rev.Bx devices with firmware v.202KRb06 and older allow a buffer overflow via long MacAddress data in a /HNAP1/SetClientInfo HNAP protocol message, which is mishandled in /usr/sbin/udhcpd during reading of the /var/servd/LAN-1-udhcpd.conf file.
D-link Dir-822 Firmware
4.3
CVSSv2
CVE-2017-10676
On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter.
D-link Dir-600m Firmware Fw3.05b01
9
CVSSv2
CVE-2018-10746
An issue exists on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'get' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'get <node_name attr>' function and cause memory co...
D-link Dsl-3782 Firmware 1.01
9
CVSSv2
CVE-2018-10748
An issue exists on D-Link DSL-3782 EU 1.01 devices. An authenticated user can pass a long buffer as a 'show' parameter to the '/userfs/bin/tcapi' binary (in the Diagnostics component) using the 'show <node_name>' function and cause memory corru...
D-link Dsl-3782 Firmware 1.01
5
CVSSv2
CVE-2020-9544
An issue exists on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-update POST request. Any attacker that can access the administrative interface can install firmware of their choice.
D-link Dsl-2640b Firmware E1 Eu 1.01
9
CVSSv2
CVE-2018-8941
Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote malicious users to execute arbitrary code via a long Addr value to the 'set Diagnostics_Entry' function in an HTTP request, related to /use...
D-link Dsl-3782 Firmware 1.01
1 Github repository
NA
CVE-2022-44928
D-Link DVG-G5402SP GE_1.03 exists to contain a command injection vulnerability via the Maintenance function.
D-link Dvg-g5402sp Firmware Ge 1.03
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32976
CVE-2024-33557
CVE-2024-36801
CVE-2024-35654
authentication bypass
CVE-2024-24919
CSRF
code execution
CVE-2024-27348
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
2
3
4
5
6
7
8
9
10
NEXT »