Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Dd Wrt HIGH 8.1
CVE-2021-27137 KEVEPSS 16%

An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticat…

Fix: 45724+
Fix from $1,950 2026-07-16
Dd Wrt CRITICAL 9.8
CVE-2022-27631

A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP requ…

Fix: after 48599
Fix from $2,300 2022-08-05
Dd Wrt HIGH 8.8
CVE-2020-13976

An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters i…

Fix: after 16214
Fix from $1,950 2020-06-09
Dd Wrt HIGH 8.8
CVE-2012-6297

Command Injection vulnerability exists via a CSRF in DD-WRT 24-sp2 from specially crafted configuration values containing shell meta-characters, whic…

No fix yet
Fix from $1,950 2020-02-06
Dd Wrt HIGH 8.3
CVE-2009-2765EPSS 83%

httpd.c in httpd in the management GUI in DD-WRT 24 sp1, and other versions before build 12533, allows remote attackers to execute arbitrary commands…

Fix: after 24
Fix from $1,950 2009-08-14
Dd Wrt HIGH 7.5
CVE-2009-2766EPSS 5%

httpd.c in httpd in the management GUI in DD-WRT 24 sp1 does not require administrative authentication for programs under cgi-bin/, which allows remo…

No fix yet
Fix from $1,950 2009-08-14
Dd Wrt MEDIUM 6.8
CVE-2008-6974

Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp1 and earlier allow remote attackers to hijack the authenticat…

Fix: after 24
Fix from $1,600 2009-08-14
Dd Wrt MEDIUM 6.8
CVE-2008-6975

Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attackers to hijack the authentication of admin…

No fix yet
Fix from $1,600 2009-08-14