dlink Vulnerability Advisory Catalog

Total 1,698 security vulnerabilities recorded for dlink software and firmware.

← Back to All Vendors
CVE-2022-30521 CRITICAL
Component: dir-890l_firmware

The LAN-side Web-Configuration Interface has Stack-based Buffer Overflow vulnerability in the D-Link Wi-Fi router firmware DIR-890L DIR890LA1_FW107b09...

📅 2022-06-02
CVSS 9.8 Dossier →
CVE-2022-28932 CRITICAL
Component: dsl-g2452dg_firmware

D-Link DSL-G2452DG HW:T1\\tFW:ME_2.00 was discovered to contain insecure permissions....

📅 2022-05-23
CVSS 9.8 Dossier →
CVE-2022-28956 CRITICAL
Component: dir-816l_firmware

An issue in the getcfg.php component of D-Link DIR816L_FW206b01 allows attackers to access the device via a crafted payload....

📅 2022-05-18
CVSS 9.8 Dossier →
Component: dir-816l_firmware

An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php....

📅 2022-05-18
CVSS 7.5 Dossier →
Component: dir-825_firmware

D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the ro...

📅 2022-05-17
CVSS 6.5 Dossier →
CVE-2022-29329 CRITICAL
Component: dap-1330_firmware

D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a heap overflow via the devicename parameter in /goform/setDeviceSettings....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-29328 CRITICAL
Component: dap-1330_firmware

D-Link DAP-1330_OSS-firmware_1.00b21 was discovered to contain a stack overflow via the function checkvalidupgrade....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-29327 CRITICAL
Component: dir-816_firmware

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the urladd parameter in /goform/websURLFilterAddDel....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-29326 CRITICAL
Component: dir-816_firmware

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addhostfilter parameter in /goform/websHostFilter....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-29325 CRITICAL
Component: dir-816_firmware

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the addurlfilter parameter in /goform/websURLFilter....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-29324 CRITICAL
Component: dir-816_firmware

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the proto parameter in /goform/form2IPQoSTcAdd....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-29323 CRITICAL
Component: dir-816_firmware

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the MAC parameter in /goform/editassignment....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-29322 CRITICAL
Component: dir-816_firmware

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the IPADDR and nvmacaddr parameters in /goform/form2Dhcpip....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-29321 CRITICAL
Component: dir-816_firmware

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a stack overflow via the lanip parameter in /goform/setNetworkLan....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-28915 CRITICAL
Component: dir-816_firmware

D-Link DIR-816 A2_v1.10CNB04 was discovered to contain a command injection vulnerability via the admuser and admpass parameters in /goform/setSysAdm....

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-28901 CRITICAL
Component: dir-882_firmware

A command injection vulnerability in the component /SetTriggerLEDBlink/Blink of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privilege...

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-28896 CRITICAL
Component: dir-882_firmware

A command injection vulnerability in the component /setnetworksettings/SubnetMask of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate priv...

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-28895 CRITICAL
Component: dir-882_firmware

A command injection vulnerability in the component /setnetworksettings/IPAddress of D-Link DIR882 DIR882A1_FW130B06 allows attackers to escalate privi...

📅 2022-05-10
CVSS 9.8 Dossier →
CVE-2022-28573 CRITICAL
Component: dir-823_pro_firmware

D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNTPserverSeting. This vulnerability allows at...

📅 2022-05-02
CVSS 9.8 Dossier →
CVE-2022-28571 CRITICAL
Component: dir-882_firmware

D-link 882 DIR882A1_FW130B06 was discovered to contain a command injection vulnerability in`/usr/bin/cli....

📅 2022-05-02
CVSS 9.8 Dossier →
CVE-2021-46442 CRITICAL
Component: dir-825_firmware

In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as d...

📅 2022-04-27
CVSS 9.8 Dossier →
Component: dir-825_firmware

In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary sy...

📅 2022-04-27
CVSS 8.8 Dossier →
Component: dir-1360_firmware

A command injection vulnerability in the protest binary allows an attacker with access to the remote command line interface to execute arbitrary comma...

📅 2022-04-11
CVSS 7.8 Dossier →
Component: dir-619_firmware

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formAdvanceSetup. This vulnerability allows attackers to cause a De...

📅 2022-04-10
CVSS 7.5 Dossier →
Page 51 of 71 (1,698 Total Records)