dlink Archives - CVE Vulnerability

CVE-2008-1266

Sun, 26 Feb 2023 09:08:56 +0000

Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.

The post CVE-2008-1266 appeared first on CVE Vulnerability.

CVE-2018-9284

Sun, 26 Feb 2023 06:51:47 +0000

authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code.

The post CVE-2018-9284 appeared first on CVE Vulnerability.

CVE-2018-9032

Sun, 26 Feb 2023 06:51:42 +0000

An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /category_view.php or /folder_view.php.

The post CVE-2018-9032 appeared first on CVE Vulnerability.

CVE-2018-6527

Sun, 26 Feb 2023 06:50:45 +0000

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.

The post CVE-2018-6527 appeared first on CVE Vulnerability.

CVE-2018-6528

Sun, 26 Feb 2023 06:50:45 +0000

XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.

The post CVE-2018-6528 appeared first on CVE Vulnerability.

CVE-2018-6529

Sun, 26 Feb 2023 06:50:45 +0000

XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.

The post CVE-2018-6529 appeared first on CVE Vulnerability.

CVE-2018-6530

Sun, 26 Feb 2023 06:50:45 +0000

OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.

The post CVE-2018-6530 appeared first on CVE Vulnerability.

CVE-2018-5708

Sun, 26 Feb 2023 06:50:26 +0000

An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator’s panel, a user can obtain the admin username and cleartext password in the response (specifically, the configuration file restore_default), which is displayed in XML.

The post CVE-2018-5708 appeared first on CVE Vulnerability.

CVE-2018-20674

Sun, 26 Feb 2023 06:48:41 +0000

D-Link DIR-822 C1 before v3.11B01Beta, DIR-822-US C1 before v3.11B01Beta, DIR-850L A* before v1.21B08Beta, DIR-850L B* before v2.22B03Beta, and DIR-880L A* before v1.20B02Beta devices allow authenticated remote command execution.

The post CVE-2018-20674 appeared first on CVE Vulnerability.

CVE-2018-20675

Sun, 26 Feb 2023 06:48:41 +0000

The post CVE-2018-20675 appeared first on CVE Vulnerability.