d-link Vulnerability Advisory Catalog

Total 106 security vulnerabilities recorded for d-link software and firmware.

← Back to All Vendors
CVE-2013-7320 UNKNOWN
Component: dap_2253_firmware

Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack ...

📅 2014-02-06
CVSS 6.8 Dossier →
CVE-2010-2293 UNKNOWN
Component: di-604

The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size....

📅 2010-06-15
CVSS 6.8 Dossier →
CVE-2010-2292 UNKNOWN
Component: di-604

Cross-site scripting (XSS) vulnerability in the Ping tools web interface in Dlink Di-604 router allows remote attackers to inject arbitrary web script...

📅 2010-06-15
CVSS 4.3 Dossier →
CVE-2010-0936 UNKNOWN
Component: dkvm-ip8

Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject a...

📅 2010-03-08
CVSS 4.3 Dossier →
CVE-2009-3347 UNKNOWN
Component: dir-400

Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a ...

📅 2009-09-24
CVSS 10.0 Dossier →
CVE-2008-4133 UNKNOWN
Component: dir-100

The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote ...

📅 2008-09-19
CVSS 4.3 Dossier →
CVE-2008-1258 UNKNOWN
Component: di-604

Cross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via th...

📅 2008-03-10
CVSS 4.3 Dossier →
CVE-2008-1253 UNKNOWN
Component: dsl-g604t

Cross-site scripting (XSS) vulnerability in cgi-bin/webcm on the D-Link DSL-G604T router allows remote attackers to inject arbitrary web script or HTM...

📅 2008-03-10
CVSS 4.3 Dossier →
CVE-2007-3348 UNKNOWN
Component: dph-540

The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP INVITE messa...

📅 2007-06-22
CVSS 7.8 Dossier →
CVE-2007-3347 UNKNOWN
Component: dph-540

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage i...

📅 2007-06-22
CVSS 7.8 Dossier →
CVE-2007-1435 UNKNOWN
Component: tftp_server

Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request, which tr...

📅 2007-03-13
CVSS 10.0 Dossier →
CVE-2006-6538 UNKNOWN
Component: dwl-2000ap\+

D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of ARP replies on the wired or wi...

📅 2006-12-14
CVSS 7.8 Dossier →
CVE-2006-6055 UNKNOWN
Component: dwl-g132

Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code via a 802...

📅 2006-11-22
CVSS 10.0 Dossier →
CVE-2006-5538 UNKNOWN
Component: dsl-g624t

D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably...

📅 2006-10-26
CVSS 5.0 Dossier →
CVE-2006-5537 UNKNOWN
Component: dsl-g624t

Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to i...

📅 2006-10-26
CVSS 4.3 Dossier →
CVE-2006-5536 UNKNOWN
Component: dsl-g624t

Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary fil...

📅 2006-10-26
CVSS 5.0 Dossier →
CVE-2006-3687 UNKNOWN
Component: di-604_broadband_router

Stack-based buffer overflow in the Universal Plug and Play (UPnP) service in D-Link DI-524, DI-604 Broadband Router, DI-624, D-Link DI-784, WBR-1310 W...

📅 2006-07-21
CVSS 7.5 Dossier →
CVE-2006-2901 UNKNOWN
Component: dwl-2100ap

The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obtain sensitive system informatio...

📅 2006-06-07
CVSS 5.0 Dossier →
CVE-2006-2653 UNKNOWN
Component: dsa-3100_airspot_gateway

Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via a...

📅 2006-05-30
CVSS 2.6 Dossier →
CVE-2006-2337 UNKNOWN
Component: dsl-g604t

Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers to read arbitrary files via an a...

📅 2006-05-12
CVSS 5.0 Dossier →
CVE-2006-0784 UNKNOWN
Component: dwl-g700ap

D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service crash) via a request composed o...

📅 2006-02-19
CVSS 5.0 Dossier →
CVE-2005-4723 UNKNOWN
Component: di-524

D-Link DI-524 Wireless Router, DI-624 Wireless Router, and DI-784 allow remote attackers to cause a denial of service (device reboot) via a series of ...

📅 2005-12-31
CVSS 5.0 Dossier →
CVE-2005-1680 UNKNOWN
Component: dsl-502t

D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if the...

📅 2005-05-20
CVSS 7.5 Dossier →
CVE-2004-0615 UNKNOWN
Component: di-614\+

Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-6...

📅 2004-12-06
CVSS 5.1 Dossier →
Page 4 of 5 (106 Total Records)