VYPR
← Dlink

Vendor CVEs

Dlink

All CVEs

1,843 total · sorted by risk
  • CVE-2011-4821Jun 20, 2014
    Dlink
    Dir 601 Firmware
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in the TFTP server in D-Link DIR-601 Wireless N150 Home Router with firmware 1.02NA allows remote attackers to read arbitrary files via unspecified vectors.

  • CVE-2014-3872May 27, 2014
    Dlink
    Dap 1350
    risk 0.00cvss —epss 0.01

    Multiple SQL injection vulnerabilities in the administration login page in D-Link DAP-1350 (Rev. A1) with firmware 1.14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password.

  • CVE-2014-3761May 16, 2014
    Dlink
    DAP 1150
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in D-Link DAP 1150 with firmware 1.2.94 allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi in the Control/URL-filter section.

  • CVE-2014-3760May 16, 2014
    Dlink
    DAP 1150
    risk 0.00cvss —epss 0.01

    Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP 1150 with firmware 1.2.94 allow remote attackers to hijack the authentication of administrators for requests that (1) enable or (2) disable the DMZ in the Firewall/DMZ section via a request to index.cgi or…

  • CVE-2013-4772May 12, 2014
    Dlink
    DIR-505L
    risk 0.00cvss —epss 0.04

    D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02 allows remote attackers to bypass authentication via a direct request when an authorized session is active.

  • CVE-2013-7321Feb 6, 2014
    Dlink
    DAP-2253 Access Point
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-7320Feb 6, 2014
    Dlink
    DAP-2253 Access Point
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors.

  • CVE-2013-7308Jan 23, 2014
    Dlink
    Des 3810 28
    risk 0.00cvss —epss 0.01

    The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to…

  • CVE-2013-6786Jan 16, 2014
    Huawei
    Mt882
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Allegro RomPager before 4.51, as used on the ZyXEL P660HW-D1, Huawei MT882, Sitecom WL-174, TP-LINK TD-8816, and D-Link DSL-2640R and DSL-2641R, when the "forbidden author header" protection mechanism is bypassed, allows remote…

  • CVE-2013-7005Dec 19, 2013
    Dlink
    Dsr 500 Firmware
    risk 0.00cvss —epss 0.01

    D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 stores account passwords in cleartext, which allows local users to…

  • CVE-2013-7004Dec 19, 2013
    Dlink
    Dsr 500 Firmware
    risk 0.00cvss —epss 0.02

    D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware before 1.08B77 have a hardcoded account of username gkJ9232xXyruTRmY, which makes…

  • CVE-2013-5998Nov 22, 2013
    D Link Japan
    DES-3800
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service (device hang) via unknown vectors, a different vulnerability than CVE-2013-5997.

  • CVE-2013-5997Nov 22, 2013
    D Link Japan
    DES-3800
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service (device hang) via unknown vectors, a different vulnerability than CVE-2013-5998.

  • CVE-2013-4707Sep 20, 2013
    Dlink
    Des 3810 Firmware
    risk 0.00cvss —epss 0.01

    The SSH implementation on D-Link Japan DES-3810 devices with firmware before R2.20.011 allows remote authenticated users to cause a denial of service (device hang) by leveraging login access.

  • CVE-2013-4706Sep 20, 2013
    Dlink
    Dwl 2100ap
    risk 0.00cvss —epss 0.01

    The SSH implementation on the D-Link Japan DWL-2100AP with firmware before R252JP-RC572 allows remote authenticated users to cause a denial of service (reboot) by leveraging login access.

  • CVE-2012-4046Dec 24, 2012
    Dlink
    Dcs 932l Firmware
    risk 0.00cvss —epss 0.01

    The D-Link DCS-932L camera with firmware 1.02 allows remote attackers to discover the password via a UDP broadcast packet, as demonstrated by running the D-Link Setup Wizard and reading the _paramR["P"] value.

  • CVE-2012-5966Dec 13, 2012
    Dlink
    DSL2730U
    risk 0.00cvss —epss 0.01

    The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shell metacharacters that follow a whitelisted command.

  • CVE-2011-4507Nov 22, 2011
    Dlink
    Dir 685
    risk 0.00cvss —epss 0.06

    The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a large amount of network traffic, which allows remote attackers to obtain sensitive information or bypass authentication via a Wi-Fi…

  • CVE-2011-3992Nov 3, 2011
    D Link Japan
    DES-3800
    risk 0.00cvss —epss 0.05

    Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via…

  • CVE-2010-4965Oct 16, 2011
    Dlink
    Dcs 2121 Firmware
    risk 0.00cvss —epss 0.03

    /etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server.

  • CVE-2010-4964Oct 16, 2011
    Dlink
    Dcs 2121 Firmware
    risk 0.00cvss —epss 0.04

    recorder_test.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability.

  • CVE-2010-2293Jun 15, 2010
    Dlink
    Di 604\+
    risk 0.00cvss —epss 0.01

    The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size.

  • CVE-2010-2292Jun 15, 2010
    Dlink
    Di 604\+
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field.

  • CVE-2009-4821Apr 27, 2010
    Dlink
    Dir 615
    risk 0.00cvss —epss 0.01

    The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remote attackers to (1) change the admin password via the admin_password parameter, (2) disable the security requirement for the Wi-Fi network via unspecified…

  • CVE-2009-3347Sep 24, 2009
    Dlink
    Dir 400
    risk 0.00cvss —epss 0.04

    Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable…

  • CVE-2009-1740May 20, 2009
    Dlink
    MPEG4 Viewer ActiveX Control
    risk 0.00cvss —epss 0.06

    Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the (1) SetFilePath and (2) SetClientCookie methods. NOTE: the provenance of this information is…

  • CVE-2008-1258Mar 10, 2008
    Dlink
    Di 604\+
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter.

  • CVE-2008-1253Mar 10, 2008
    Dlink
    Dsl G604t
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inject arbitrary web script or HTML via the var:category parameter, as demonstrated by a request for advanced/portforw.htm on the fwan page.

  • CVE-2008-1266Mar 10, 2008
    Dlink
    Di 524
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.

  • CVE-2007-3347Jun 22, 2007
    Dlink
    DPH-540/DPH-541
    risk 0.00cvss —epss 0.01

    The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID.

  • CVE-2007-3348Jun 22, 2007
    Dlink
    DPH-540/DPH-541
    risk 0.00cvss —epss 0.02

    The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE message.

  • CVE-2006-5538Oct 26, 2006
    Dlink
    Dsl G624t
    risk 0.00cvss —epss 0.01

    D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably a direct request.

  • CVE-2006-5537Oct 26, 2006
    Dlink
    Dsl G624t
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1) upnp:settings/state or (2) upnp:settings/connection parameters.

  • CVE-2006-2337May 12, 2006
    Dlink
    Dsl G604t
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers to read arbitrary files via an absolute path in the getpage parameter.

  • CVE-2005-1680May 20, 2005
    Dlink
    Dsl 502t
    risk 0.00cvss —epss 0.01

    D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or (2) if their request is the first, which causes /var/tmp/fw_ip to be created…

  • CVE-2004-0661Aug 6, 2004
    Dlink
    DI-614+
    risk 0.00cvss —epss 0.02

    Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.

  • CVE-2003-1264Dec 31, 2003
    Longshine
    LCS-883R-AC-B
    risk 0.00cvss —epss 0.02

    TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without…

  • CVE-2003-1346Dec 31, 2003
    Dlink
    DWL-900AP+
    risk 0.00cvss —epss 0.02

    D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.

  • CVE-2002-2137Dec 31, 2002
    Linksys
    Wap11
    risk 0.00cvss —epss 0.02

    GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the…

  • CVE-2002-1068Oct 4, 2002
    Dlink
    DP-300
    risk 0.00cvss —epss 0.01

    The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.

  • CVE-2002-1069Oct 4, 2002
    Dlink
    Di 804
    risk 0.00cvss —epss 0.02

    The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information.

  • CVE-2001-1220Dec 21, 2001
    Dlink
    Dwl 1000ap
    risk 0.00cvss —epss 0.02

    D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges.

  • CVE-2001-1221Dec 21, 2001
    Dlink
    Dwl 1000ap
    risk 0.00cvss —epss 0.01

    D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information.

Page 37 of 37