dir-615_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-615_firmware/ Sun, 26 Feb 2023 06:46:49 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png dir-615_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-615_firmware/ 32 32 CVE-2018-15875 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-15875/ Sun, 26 Feb 2023 06:46:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-15875/ Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router’s admin UPnP page via the description field in an AddPortMapping UPnP SOAP request.

The post CVE-2018-15875 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router’s admin UPnP page via the description field in an AddPortMapping UPnP SOAP request.

The post CVE-2018-15875 appeared first on CVE Vulnerability.

]]> CVE-2018-15839 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-15839/ Sun, 26 Feb 2023 06:46:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-15839/ D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.

The post CVE-2018-15839 appeared first on CVE Vulnerability.

]]> D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.

The post CVE-2018-15839 appeared first on CVE Vulnerability.

]]> CVE-2018-15874 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-15874/ Sun, 26 Feb 2023 06:46:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-15874/ Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the “Status -> Active Client Table” page via the hostname field in a DHCP request.

The post CVE-2018-15874 appeared first on CVE Vulnerability.

]]> Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the “Status -> Active Client Table” page via the hostname field in a DHCP request.

The post CVE-2018-15874 appeared first on CVE Vulnerability.

]]> CVE-2019-19742 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19742/ Sun, 26 Feb 2023 06:32:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19742/ On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.

The post CVE-2019-19742 appeared first on CVE Vulnerability.

]]> On D-Link DIR-615 devices, the User Account Configuration page is vulnerable to blind XSS via the name field.

The post CVE-2019-19742 appeared first on CVE Vulnerability.

]]> CVE-2019-17525 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-17525/ Sun, 26 Feb 2023 06:31:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-17525/ The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.

The post CVE-2019-17525 appeared first on CVE Vulnerability.

]]> The login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA protection mechanism and conduct brute-force attacks.

The post CVE-2019-17525 appeared first on CVE Vulnerability.

]]> CVE-2019-17353 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-17353/ Sun, 26 Feb 2023 06:31:33 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-17353/ An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.

The post CVE-2019-17353 appeared first on CVE Vulnerability.

]]> An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to modify the data fields of the page.

The post CVE-2019-17353 appeared first on CVE Vulnerability.

]]> CVE-2021-40654 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-40654/ Thu, 23 Feb 2023 14:11:48 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-40654/ An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page

The post CVE-2021-40654 appeared first on CVE Vulnerability.

]]> An information disclosure issue exist in D-LINK-DIR-615 B2 2.01mt. An attacker can obtain a user name and password by forging a post request to the / getcfg.php page

The post CVE-2021-40654 appeared first on CVE Vulnerability.

]]> CVE-2021-37388 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-37388/ Thu, 23 Feb 2023 14:10:55 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-37388/ A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution.

The post CVE-2021-37388 appeared first on CVE Vulnerability.

]]> A buffer overflow in D-Link DIR-615 C2 3.03WW. The ping_ipaddr parameter in ping_response.cgi POST request allows an attacker to crash the webserver and might even gain remote code execution.

The post CVE-2021-37388 appeared first on CVE Vulnerability.

]]>