Vulnerability index

Browse CVEs

1,663 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Dir 1950 Firmware MEDIUM 6.8
CVE-2024-36755

D-Link DIR-1950 up to v1.11B03 does not validate SSL certificates when requesting the latest firmware version and downloading URL. This can allow att…

Fix: after 1.11b03
Fix from $1,600 2024-06-27
Dir 605l Firmware HIGH 8.8
CVE-2024-37630

D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root.

No fix yet
Fix from $1,950 2024-06-13
Di 7003g Firmware MEDIUM 5.7
CVE-2023-30309

An issue discovered in D-Link DI-7003GV2 routers allows attackers to hijack TCP sessions which could lead to a denial of service.

No fix yet
Fix from $1,600 2024-05-28
D View 8 HIGH 8.8
CVE-2024-5298

D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers…

Mitigation only
Fix from $1,950 2024-05-23
D View 8 HIGH 8.8
CVE-2024-5299

D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a…

Mitigation only
Fix from $1,950 2024-05-23
D View 8 CRITICAL 9.8
CVE-2024-5296

D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentic…

Mitigation only
Fix from $2,300 2024-05-23
Dir 2640 Firmware HIGH 8.8
CVE-2024-5293

D-Link DIR-2640 HTTP Referer Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…

Mitigation only
Fix from $1,950 2024-05-23
G416 Firmware HIGH 8.8
CVE-2024-5295

D-Link G416 flupl self Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra…

Fix: 1.09b01+
Fix from $1,950 2024-05-23
D View 8 HIGH 8.8
CVE-2024-5297

D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary c…

No fix yet
Fix from $1,950 2024-05-23
Dir 3040 Firmware MEDIUM 6.5
CVE-2024-5294

D-Link DIR-3040 prog.cgi websSecurityHandler Memory Leak Denial-of-Service Vulnerability. This vulnerability allows network-adjacent attackers to cre…

Mitigation only
Fix from $1,600 2024-05-23
Dir 2150 Firmware HIGH 8.8
CVE-2024-5291

D-Link DIR-2150 GetDeviceSettings Target Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers …

Mitigation only
Fix from $1,950 2024-05-23
Network Assistant HIGH 7.8
CVE-2024-5292

D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to esca…

Fix: after 4.0.0.21
Fix from $1,950 2024-05-23
Dar 7000 Firmware CRITICAL 9.8
CVE-2024-4965

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unkn…

Mitigation only
Fix from $2,300 2024-05-16
Dar 7000 Firmware CRITICAL 9.8
CVE-2024-4964

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affe…

Mitigation only
Fix from $2,300 2024-05-16
Dar 7000 Firmware CRITICAL 9.8
CVE-2024-4963

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000-40 V31R02B1413C. This affects an unkn…

Mitigation only
Fix from $2,300 2024-05-16
Dar 7000 Firmware CRITICAL 9.8
CVE-2024-4962

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by thi…

Mitigation only
Fix from $2,300 2024-05-16
Dar 7000 Firmware CRITICAL 9.8
CVE-2024-4961

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability i…

Mitigation only
Fix from $2,300 2024-05-16
Dar 7000 Firmware CRITICAL 9.8
CVE-2024-4960

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown func…

Mitigation only
Fix from $2,300 2024-05-16
Dir 822\+ Firmware HIGH 7.5
CVE-2024-34950EPSS 5%

D-Link DIR-822+ v1.0.5 was discovered to contain a stack-based buffer overflow vulnerability in the SetNetworkTomographySettings module.

No fix yet
Fix from $1,950 2024-05-14
Dar 8000 10 Firmware CRITICAL 9.8
CVE-2024-4699EPSS 6%

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue af…

Fix: after 20230922
Fix from $2,300 2024-05-14
Dir 619l Firmware MEDIUM 6.5
CVE-2024-33771

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via goform/formWPS, allows remote authenticated users to trigger a denial…

No fix yet
Fix from $1,600 2024-05-14
Dir 619l Firmware MEDIUM 6.5
CVE-2024-33773

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a den…

No fix yet
Fix from $1,600 2024-05-14
Dir 619l Firmware MEDIUM 6.5
CVE-2024-33774

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanSetup_Wizard allows remote authenticated users to trigger a d…

No fix yet
Fix from $1,600 2024-05-14
Dir 619l Firmware MEDIUM 5.7
CVE-2024-33772

A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formTcpipSetup allows remote authenticated users to trigger a denial …

No fix yet
Fix from $1,600 2024-05-14
Dap 2622 Firmware HIGH 8.8
CVE-2023-35749

D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adja…

Mitigation only
Fix from $1,950 2024-05-07
Dap 2622 Firmware HIGH 8.8
CVE-2023-35757

D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjac…

Fix: 1.10b03r022+
Fix from $1,950 2024-05-07
Dap 2622 Firmware MEDIUM 5.4
CVE-2023-37325

D-Link DAP-2622 DDP Set SSID List Missing Authentication Vulnerability. This vulnerability allows network-adjacent attackers to make unauthorized cha…

Mitigation only
Fix from $1,600 2024-05-07
Dap 2622 Firmware HIGH 8.8
CVE-2023-35748

D-Link DAP-2622 DDP Firmware Upgrade Server IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows n…

Mitigation only
Fix from $1,950 2024-05-07
Dir 845l Firmware CRITICAL 9.1
CVE-2024-33110

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component.

Fix: after 1.01krb03
Fix from $2,300 2024-05-06
Dir 845l Firmware HIGH 7.5
CVE-2024-33112EPSS 6%

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.

Fix: after 1.01krb03
Fix from $1,950 2024-05-06