Vulnerabilities > Dlink > High

DATE CVE VULNERABILITY TITLE RISK
2019-02-13 CVE-2019-8316 OS Command Injection vulnerability in Dlink Dir-878 Firmware 1.12A1
An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
network
low complexity
dlink CWE-78
8.8
2019-02-13 CVE-2019-8315 OS Command Injection vulnerability in Dlink Dir-878 Firmware 1.12A1
An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
network
low complexity
dlink CWE-78
8.8
2019-02-13 CVE-2019-8314 OS Command Injection vulnerability in Dlink Dir-878 Firmware 1.12A1
An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
network
low complexity
dlink CWE-78
8.8
2019-02-13 CVE-2019-8313 OS Command Injection vulnerability in Dlink Dir-878 Firmware 1.12A1
An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
network
low complexity
dlink CWE-78
8.8
2019-02-13 CVE-2019-8312 OS Command Injection vulnerability in Dlink Dir-878 Firmware 1.12A1
An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1.
network
low complexity
dlink CWE-78
8.8
2019-02-05 CVE-2019-7390 Missing Authentication for Critical Function vulnerability in Dlink Dir-823G Firmware 1.02B03
An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03.
network
low complexity
dlink CWE-306
8.6
2019-02-05 CVE-2019-7389 Missing Authentication for Critical Function vulnerability in Dlink Dir-823G Firmware 1.02B03
An issue was discovered in /bin/goahead on D-Link DIR-823G devices with the firmware 1.02B03.
network
low complexity
dlink CWE-306
7.5
2019-02-05 CVE-2019-7388 Information Exposure vulnerability in Dlink Dir-823G Firmware 1.02B03
An issue was discovered in /bin/goahead on D-Link DIR-823G devices with firmware 1.02B03.
network
low complexity
dlink CWE-200
7.5
2019-02-01 CVE-2019-7298 OS Command Injection vulnerability in Dlink Dir-823G Firmware
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03.
network
high complexity
dlink CWE-78
8.1
2019-01-31 CVE-2018-15517 Server-Side Request Forgery (SSRF) vulnerability in Dlink Central Wifimanager 1.03
The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an index.php/System/MailConnect/host/127.0.0.1/port/22/secure/ URI.
network
low complexity
dlink CWE-918
8.6