Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,814

Export CSV
CVE-2022-29324

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd.

CVSS 3.1 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Dlink
Products
Dir-816 Dir-816 Firmware
CVE-2022-29323

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment.

CVSS 3.1 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Dlink
Products
Dir-816 Dir-816 Firmware
CVE-2022-29322

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip.

CVSS 3.1 · 9.8 Critical EPSS 16.9% KEV · Not listed
Vendors
Dlink
Products
Dir-816 Dir-816 Firmware
CVE-2022-29321

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan.

CVSS 3.1 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Dlink
Products
Dir-816 Dir-816 Firmware
CVE-2022-28956

An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload.

CVSS 3.1 · 9.8 Critical EPSS 22.7% KEV · Not listed
Vendors
Dlink
Products
Dir-816l Dir-816l Firmware
CVE-2022-28955

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

CVSS 3.1 · 7.5 High EPSS 39.7% KEV · Not listed
Vendors
Dlink
Products
Dir-816l Dir-816l Firmware
CVE-2022-28915

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm.

CVSS 3.1 · 9.8 Critical EPSS 6.3% KEV · Not listed
Vendors
Dlink
Products
Dir-816 Dir-816 Firmware
CVE-2022-28901

A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Dlink
Products
Dir-882 Dir-882 Firmware
CVE-2022-28896

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Dlink
Products
Dir-882 Dir-882 Firmware
CVE-2022-28895

A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privileges to root via a crafted payload.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Dlink
Products
Dir-882 Dir-882 Firmware
CVE-2022-28573

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows attackers to execute arbitrary commands via the system_time_timezone parameter.

CVSS 3.1 · 9.8 Critical EPSS 28.2% KEV · Not listed
Vendors
Dlink
Products
Dir-823 Pro Dir-823 Pro Firmware
CVE-2022-27295

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Dlink
Products
Dir-619 Dir-619 Firmware
CVE-2022-27294

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanWizardSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Dlink
Products
Dir-619 Dir-619 Firmware
CVE-2022-27293

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formWlanSetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the webpage parameter.

CVSS 3.1 · 7.5 High EPSS 2.6% KEV · Not listed
Vendors
Dlink
Products
Dir-619 Dir-619 Firmware
CVE-2022-27292

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formLanguageChange. This vulnerability allows attackers to cause a Denial of Service (DoS) via the nextPage parameter.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Dlink
Products
Dir-619 Dir-619 Firmware
CVE-2022-27291

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formdumpeasysetup. This vulnerability allows attackers to cause a Denial of Service (DoS) via the config.save_network_enabled parameter.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Dlink
Products
Dir-619 Dir-619 Firmware
CVE-2022-27290

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanDhcpplus. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Dlink
Products
Dir-619 Dir-619 Firmware
CVE-2022-27289

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability allows attackers to cause a Denial of Service (DoS) via the curTime parameter.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Dlink
Products
Dir-619 Dir-619 Firmware