Browse CVEs

CRITICAL 9.8 CVE-2015-0150 The remote administration UI in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to bypass intended access restrictions v… Dir 815 Firmware 2.07.b01+ Fix from $2,3002018-04-12 CRITICAL 9.8 CVE-2015-0152 D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the ad… Dir 815 Firmware 2.07.b01+ Fix from $2,3002018-04-12 HIGH 8.8 CVE-2015-0151 Cross-site request forgery (CSRF) vulnerability in D-Link DIR-815 devices with firmware before 2.07.B01 allows remote attackers to hijack the authent… Dir 815 Firmware 2.07.b01+ Fix from $1,9502018-04-12 HIGH 7.5 CVE-2015-0153 D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wi… Dir 815 Firmware 2.07.b01+ Fix from $1,9502018-04-12 CRITICAL 9.8 CVE-2018-9284 authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code. Singapore Starhub Firmware 1.21shcb03+ Fix from $2,3002018-04-04 HIGH 8.0 CVE-2018-5708EPSS 6% An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator's pa… Dir 601 Firmware No fix yet Fix from $1,9502018-03-30 CRITICAL 9.8 CVE-2018-9032EPSS 28% An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version… Dir 850l Firmware after 2.06 Fix from $2,3002018-03-27 CRITICAL 9.8 CVE-2018-6530 KEVEPSS 97% OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions… Dir 860l Firmware after 1.12b04 Fix from $2,3002018-03-06 MEDIUM 6.1 CVE-2018-6527 XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIR… Dir 860l Firmware No fix yet Fix from $1,6002018-03-06 MEDIUM 6.1 CVE-2018-6528 XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE… Dir 860l Firmware No fix yet Fix from $1,6002018-03-06 MEDIUM 6.1 CVE-2018-6529 XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_… Dir 860l Firmware No fix yet Fix from $1,6002018-03-06 HIGH 8.8 CVE-2017-3193EPSS 6% Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web … Dir 850l Firmware Patch available Fix from $1,9502017-12-16 HIGH 7.5 CVE-2017-17065 An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication values for … Dir 605l Model B Firmware Mitigation only Fix from $1,9502017-11-30 MEDIUM 6.1 CVE-2017-16765 XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi. Dwr 933 Firmware No fix yet Fix from $1,6002017-11-10 MEDIUM 6.1 CVE-2016-10699 D-Link DSL-2740E 1.00_BG_20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may … Dsl 2740e Firmware No fix yet Fix from $1,6002017-10-31 CRITICAL 9.8 CVE-2017-15909 D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access. Dgs 1500 Firmware Mitigation only Fix from $2,3002017-10-26 CRITICAL 9.8 CVE-2015-1187 KEVEPSS 83% The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp. Dir 626l Firmware Mitigation only Fix from $2,3002017-09-21 CRITICAL 9.8 CVE-2017-14417 register_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not require authentication, which can result in unintende… Dir 850l Firmware No fix yet Fix from $2,3002017-09-13 CRITICAL 9.8 CVE-2017-14421 D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of wrgac25_dlink.2013gui_dir850l for the Alphanetworks ac… Dir 850l Firmware No fix yet Fix from $2,3002017-09-13 CRITICAL 9.8 CVE-2017-14429 The DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allows … Dir 850l Firmware No fix yet Fix from $2,3002017-09-13 HIGH 8.1 CVE-2017-14418 The D-Link NPAPI extension, as used in conjunction with D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices, sends the cleartext admin … Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 HIGH 7.8 CVE-2017-14424 D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/passwd perm… Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 HIGH 7.8 CVE-2017-14425 D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/etc/hnapass… Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 HIGH 7.8 CVE-2017-14426 D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0644 /var/etc/shadow … Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 HIGH 7.8 CVE-2017-14427 D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/storage… Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 HIGH 7.8 CVE-2017-14428 D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/hostapd… Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 HIGH 7.5 CVE-2017-14422 D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices use the same hardcoded /et… Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 HIGH 7.5 CVE-2017-14423 htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated non… Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 HIGH 7.5 CVE-2017-14430 D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allow remote attackers to … Dir 850l Firmware No fix yet Fix from $1,9502017-09-13 MEDIUM 6.1 CVE-2017-14413 D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the action parameter to htdocs/web/wpsacts.php. Dir 850l Firmware No fix yet Fix from $1,6002017-09-13