Vulnerabilities (CVE)

Filtered by vendor Dlink Subscribe
Total 1257 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-25743 1 Dlink 2 Dir-853, Dir-853 Firmware 2025-03-05 N/A 7.2 HIGH
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a command injection vulnerability in the SetVirtualServerSettings module.
CVE-2025-25742 1 Dlink 2 Dir-853, Dir-853 Firmware 2025-03-05 N/A 9.8 CRITICAL
D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module.
CVE-2023-25279 1 Dlink 2 Dir-820l, Dir-820l Firmware 2025-03-03 N/A 9.8 CRITICAL
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.
CVE-2023-24762 1 Dlink 2 Dir-867, Dir-867 Firmware 2025-03-03 N/A 9.8 CRITICAL
OS Command injection vulnerability in D-Link DIR-867 DIR_867_FW1.30B07 allows attackers to execute arbitrary commands via a crafted LocalIPAddress parameter for the SetVirtualServerSettings to HNAP1.
CVE-2023-25283 1 Dlink 2 Dir-820l, Dir-820l Firmware 2025-02-27 N/A 7.5 HIGH
A stack overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the reserveDHCP_HostName_1.1.1.0 parameter to lan.asp.
CVE-2025-1538 1 Dlink 2 Dap-1320, Dap-1320 Firmware 2025-02-25 9.0 HIGH 8.8 HIGH
A vulnerability classified as critical was found in D-Link DAP-1320 1.00. Affected by this vulnerability is the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
CVE-2023-26925 1 Dlink 2 Dir-882, Dir-882 Firmware 2025-02-18 N/A 7.5 HIGH
An information disclosure vulnerability exists in the Syslog functionality of D-LINK DIR-882 1.30. A specially crafted network request can lead to the disclosure of sensitive information.
CVE-2023-24800 1 Dlink 2 Dir-878, Dir-878 Firmware 2025-02-13 N/A 9.8 CRITICAL
D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-24799 1 Dlink 2 Dir-878, Dir-878 Firmware 2025-02-13 N/A 9.8 CRITICAL
D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-24798 1 Dlink 2 Dir-878, Dir-878 Firmware 2025-02-13 N/A 9.8 CRITICAL
D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-24797 1 Dlink 2 Dir-882 A1, Dir-882 A1 Firmware 2025-02-13 N/A 9.8 CRITICAL
D-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27720 1 Dlink 2 Dir-878, Dir-878 Firmware 2025-02-12 N/A 9.8 CRITICAL
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27719 1 Dlink 2 Dir878, Dir878 Firmware 2025-02-12 N/A 9.8 CRITICAL
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_478360 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-27718 1 Dlink 2 Dir878, Dir878 Firmware 2025-02-11 N/A 9.8 CRITICAL
D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_498308 function. This vulnerability allows attackers to cause a Denial of Service (DoS) or execute arbitrary code via a crafted payload.
CVE-2023-26822 1 Dlink 2 Go-rt-ac750, Go-rt-ac750 Firmware 2025-02-11 N/A 9.8 CRITICAL
D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at soapcgi.main.
CVE-2023-27216 1 Dlink 2 Dsl-3782, Dsl-3782 Firmware 2025-02-10 N/A 8.8 HIGH
An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page.
CVE-2023-29665 1 Dlink 2 Dir-823g, Dir-823g Firmware 2025-02-06 N/A 9.8 CRITICAL
D-Link DIR823G_V1.0.2B05 was discovered to contain a stack overflow via the NewPassword parameters in SetPasswdSettings.
CVE-2022-40946 1 Dlink 2 Dir-819, Dir-819 Firmware 2025-02-06 N/A 7.5 HIGH
On D-Link DIR-819 Firmware Version 1.06 Hardware Version A1 devices, it is possible to trigger a Denial of Service via the sys_token parameter in a cgi-bin/webproc?getpage=html/index.html request.
CVE-2023-30063 1 Dlink 2 Dir-890l, Dir-890l Firmware 2025-01-30 N/A 7.5 HIGH
D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass.
CVE-2023-30061 1 Dlink 2 Dir-879, Dir-879 Firmware 2025-01-30 N/A 7.5 HIGH
D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi.