VYPR
← Dlink

Vendor CVEs

Dlink

All CVEs

1,931 total · sorted by risk
  • CVE-2013-5998Nov 22, 2013
    D Link Japan
    DES-3800
    risk 0.00cvss —epss 0.02

    Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service (device hang) via unknown vectors, a different vulnerability than CVE-2013-5997.

  • CVE-2013-5997Nov 22, 2013
    D Link Japan
    DES-3800
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service (device hang) via unknown vectors, a different vulnerability than CVE-2013-5998.

  • CVE-2013-4707Sep 20, 2013
    Dlink
    Des 3810 Firmware
    risk 0.00cvss —epss 0.01

    The SSH implementation on D-Link Japan DES-3810 devices with firmware before R2.20.011 allows remote authenticated users to cause a denial of service (device hang) by leveraging login access.

  • CVE-2013-4706Sep 20, 2013
    Dlink
    Dwl 2100ap
    risk 0.00cvss —epss 0.01

    The SSH implementation on the D-Link Japan DWL-2100AP with firmware before R252JP-RC572 allows remote authenticated users to cause a denial of service (reboot) by leveraging login access.

  • CVE-2012-4046Dec 24, 2012
    Dlink
    Dcs 932l Firmware
    risk 0.00cvss —epss 0.01

    The D-Link DCS-932L camera with firmware 1.02 allows remote attackers to discover the password via a UDP broadcast packet, as demonstrated by running the D-Link Setup Wizard and reading the _paramR["P"] value.

  • CVE-2012-5966Dec 13, 2012
    Dlink
    DSL2730U
    risk 0.00cvss —epss 0.01

    The restricted telnet shell on the D-Link DSL2730U router allows remote authenticated users to bypass intended command restrictions via shell metacharacters that follow a whitelisted command.

  • CVE-2011-3992Nov 3, 2011
    D Link Japan
    DES-3800
    risk 0.00cvss —epss 0.05

    Buffer overflow in the SSH server functionality on the D-Link DES-3800 with firmware before 4.50B052, DWL-2100AP with firmware before 2.50RC548, and DWL-3200AP with firmware before 2.55RC549 allows remote attackers to execute arbitrary code or cause a denial of service via…

  • CVE-2010-4965Oct 16, 2011
    Dlink
    Dcs 2121 Firmware
    risk 0.00cvss —epss 0.03

    /etc/rc.d/rc.local on the D-Link DCS-2121 camera with firmware 1.04 configures a hardcoded password of admin for the root account, which makes it easier for remote attackers to obtain shell access by leveraging a running telnetd server.

  • CVE-2010-4964Oct 16, 2011
    Dlink
    Dcs 2121 Firmware
    risk 0.00cvss —epss 0.04

    recorder_test.cgi on the D-Link DCS-2121 camera with firmware 1.04 allows remote attackers to execute arbitrary commands via shell metacharacters in the Password field, related to a "semicolon injection" vulnerability.

  • CVE-2010-2293Jun 15, 2010
    Dlink
    Di 604\+
    risk 0.00cvss —epss 0.01

    The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size.

  • CVE-2010-2292Jun 15, 2010
    Dlink
    Di 604\+
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script or HTML via the IP field.

  • CVE-2009-4821Apr 27, 2010
    Dlink
    Dir 615
    risk 0.00cvss —epss 0.01

    The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remote attackers to (1) change the admin password via the admin_password parameter, (2) disable the security requirement for the Wi-Fi network via unspecified…

  • CVE-2009-3347Sep 24, 2009
    Dlink
    Dir 400
    risk 0.00cvss —epss 0.04

    Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11. NOTE: as of 20090917, this disclosure has no actionable…

  • CVE-2009-1740May 20, 2009
    Dlink
    MPEG4 Viewer ActiveX Control
    risk 0.00cvss —epss 0.06

    Multiple heap-based buffer overflows in the D-Link MPEG4 Viewer ActiveX Control (csviewer.ocx) 2.11.918.2006 allow remote attackers to execute arbitrary code via a long argument to the (1) SetFilePath and (2) SetClientCookie methods. NOTE: the provenance of this information is…

  • CVE-2008-1266Mar 10, 2008
    Dlink
    Di 524
    risk 0.00cvss —epss 0.03

    Multiple buffer overflows in the web interface on the D-Link DI-524 router allow remote attackers to cause a denial of service (device crash) or possibly have unspecified other impact via (1) a long username or (2) an HTTP header with a large name and an empty value.

  • CVE-2008-1258Mar 10, 2008
    Dlink
    Di 604\+
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter.

  • CVE-2008-1253Mar 10, 2008
    Dlink
    Dsl G604t
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inject arbitrary web script or HTML via the var:category parameter, as demonstrated by a request for advanced/portforw.htm on the fwan page.

  • CVE-2007-3348Jun 22, 2007
    Dlink
    DPH-540/DPH-541
    risk 0.00cvss —epss 0.02

    The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE message.

  • CVE-2007-3347Jun 22, 2007
    Dlink
    DPH-540/DPH-541
    risk 0.00cvss —epss 0.01

    The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID.

  • CVE-2006-5537Oct 26, 2006
    Dlink
    Dsl G624t
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1) upnp:settings/state or (2) upnp:settings/connection parameters.

  • CVE-2006-5538Oct 26, 2006
    Dlink
    Dsl G624t
    risk 0.00cvss —epss 0.01

    D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably a direct request.

  • CVE-2006-2337May 12, 2006
    Dlink
    Dsl G604t
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers to read arbitrary files via an absolute path in the getpage parameter.

  • CVE-2005-1680May 20, 2005
    Dlink
    Dsl 502t
    risk 0.00cvss —epss 0.01

    D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or (2) if their request is the first, which causes /var/tmp/fw_ip to be created…

  • CVE-2004-0661Aug 6, 2004
    Dlink
    DI-614+
    risk 0.00cvss —epss 0.02

    Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.

  • CVE-2003-1264Dec 31, 2003
    Longshine
    LCS-883R-AC-B
    risk 0.00cvss —epss 0.02

    TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without…

  • CVE-2003-1346Dec 31, 2003
    Dlink
    DWL-900AP+
    risk 0.00cvss —epss 0.02

    D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.

  • CVE-2002-2137Dec 31, 2002
    Linksys
    Wap11
    risk 0.00cvss —epss 0.02

    GlobalSunTech Wireless Access Points (1) WISECOM GL2422AP-0T, and possibly OEM products such as (2) D-Link DWL-900AP+ B1 2.1 and 2.2, (3) ALLOY GL-2422AP-S, (4) EUSSO GL2422-AP, and (5) LINKSYS WAP11-V2.2, allow remote attackers to obtain sensitive information like WEP keys, the…

  • CVE-2002-1068Oct 4, 2002
    Dlink
    DP-300
    risk 0.00cvss —epss 0.01

    The web server for D-Link DP-300 print server allows remote attackers to cause a denial of service (hang) via a large HTTP POST request.

  • CVE-2002-1069Oct 4, 2002
    Dlink
    Di 804
    risk 0.00cvss —epss 0.02

    The remote administration capability for the D-Link DI-804 router 4.68 allows remote attackers to bypass authentication and release DHCP addresses or obtain sensitive information via a direct web request to the pages (1) release.htm, (2) Device Status, or (3) Device Information.

  • CVE-2001-1220Dec 21, 2001
    Dlink
    Dwl 1000ap
    risk 0.00cvss —epss 0.02

    D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges.

  • CVE-2001-1221Dec 21, 2001
    Dlink
    Dwl 1000ap
    risk 0.00cvss —epss 0.01

    D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point uses a default SNMP community string of 'public' which allows remote attackers to gain sensitive information.

Page 39 of 39