Vulnerabilities > Dlink

DATE CVE VULNERABILITY TITLE RISK
2018-09-15 CVE-2018-17068 OS Command Injection vulnerability in Dlink Dir-816 A2 Firmware 1.10B05
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices.
network
low complexity
dlink CWE-78
critical
9.8
2018-09-15 CVE-2018-17067 Out-of-bounds Write vulnerability in Dlink Dir-816 A2 Firmware 1.10B05
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices.
network
low complexity
dlink CWE-787
critical
9.8
2018-09-15 CVE-2018-17066 OS Command Injection vulnerability in Dlink Dir-816 A2 Firmware 1.10B05
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices.
network
low complexity
dlink CWE-78
critical
9.8
2018-09-15 CVE-2018-17065 Out-of-bounds Write vulnerability in Dlink Dir-816 A2 Firmware 1.10B05
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices.
network
low complexity
dlink CWE-787
critical
9.8
2018-09-15 CVE-2018-17064 OS Command Injection vulnerability in Dlink Dir-816 A2 Firmware 1.10B05
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices.
network
low complexity
dlink CWE-78
critical
9.8
2018-09-15 CVE-2018-17063 OS Command Injection vulnerability in Dlink Dir-816 A2 Firmware 1.10B05
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices.
network
low complexity
dlink CWE-78
critical
9.8
2018-09-12 CVE-2018-16605 Cross-site Scripting vulnerability in Dlink Dir-600M Firmware
D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.
network
low complexity
dlink CWE-79
5.4
2018-08-29 CVE-2018-12710 Cleartext Transmission of Sensitive Information vulnerability in Dlink Dir-601 Firmware 2.02Na
An issue was discovered on D-Link DIR-601 2.02NA devices.
low complexity
dlink CWE-319
8.0
2018-08-28 CVE-2018-15839 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Dlink Dir-615 Firmware
D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.
network
low complexity
dlink CWE-119
critical
9.8
2018-08-25 CVE-2018-15875 Cross-site Scripting vulnerability in Dlink Dir-615 Firmware 20.07
Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request.
network
low complexity
dlink CWE-79
6.1