Dlink

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-30063 1Dlink 1Dir 890l Firmware Jun 17, 2026 May 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.
CVE-2023-30061 1Dlink 1Dir 879 Firmware Jun 17, 2026 May 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.
CVE-2023-29665 1Dlink 1Dir 823g Firmware Jun 17, 2026 Apr 17, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings.
CVE-2022-40946 1Dlink 1Dir 819 Firmware Jun 17, 2026 Apr 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the sys_token parameter in a cgi-bin/webproc?getpage=html/index.html request.
CVE-2023-27216 1Dlink 1Dsl 3782 Firmware Jun 17, 2026 Apr 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.
CVE-2023-27720 1Dlink 1Dir 878 Firmware Jun 17, 2026 Apr 9, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27719 1Dlink 1Dir878 Firmware Jun 17, 2026 Apr 9, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27718 1Dlink 1Dir878 Firmware Jun 17, 2026 Apr 9, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-24800 1Dlink 1Dir 878 Firmware Jun 17, 2026 Apr 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload...Show more D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.Show less
CVE-2023-24799 1Dlink 1Dir 878 Firmware Jun 17, 2026 Apr 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload...Show more D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.Show less
CVE-2023-24798 1Dlink 1Dir 878 Firmware Jun 17, 2026 Apr 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload...Show more D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.Show less
CVE-2023-24797 1Dlink 1Dir 882 A1 Firmware Jun 17, 2026 Apr 7, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payloa...Show more D-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.Show less
CVE-2023-26822 1Dlink 1Go Rt Ac750 Firmware Jun 17, 2026 Apr 1, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main.
CVE-2023-26925 1Dlink 1Dir 882 Firmware Jun 17, 2026 Mar 31, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information.
CVE-2022-43648 1Dlink 1Dir 3040 Firmware Jun 17, 2026 Mar 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is not required to exploit this vulnerability. The specific flaw...Show more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 1.20B03 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MiniDLNA service. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the MiniDLNA service. Was ZDI-CAN-19910.Show less
CVE-2022-43647 1Dlink 2Dir 825/ac Firmware Dir 825/ee Firmware Jun 17, 2026 Mar 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw...Show more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the xupnpd service, which listens on TCP port 4044. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-19464.Show less
CVE-2022-43646 1Dlink 2Dir 825/ac Firmware Dir 825/ee Firmware Jun 17, 2026 Mar 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw...Show more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Vimeo plugin for the xupnpd service, which listens on TCP port 4044. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-19463.Show less
CVE-2022-43645 1Dlink 2Dir 825/ac Firmware Dir 825/ee Firmware Jun 17, 2026 Mar 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw...Show more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the IVI plugin for the xupnpd service, which listens on TCP port 4044. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-19462.Show less
CVE-2022-43644 1Dlink 2Dir 825/ac Firmware Dir 825/ee Firmware Jun 17, 2026 Mar 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw...Show more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Dreambox plugin for the xupnpd service, which listens on TCP port 4044. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-19461.Show less
CVE-2022-43643 1Dlink 2Dir 825/ac Firmware Dir 825/ee Firmware Jun 17, 2026 Mar 29, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw...Show more This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-825 1.0.9/EE routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Generic plugin for the xupnpd service, which listens on TCP port 4044. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the admin user. Was ZDI-CAN-19460.Show less

Previous 1...535455...86 Next