Vulnerabilities

TI-2023-15449 CVE-2023-32146 · GHSA-ww8m-4272-59w5

Stack-based buffer overflow in D-Link DAP-1360

MEDIUM 42

D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01101 Published 2024-05-03 No fix listed CWE-121

TI-2023-15448 CVE-2023-32145 · GHSA-fxvm-rjfh-3pwm

Hard-coded credentials in D-Link DAP-1360

MEDIUM 42

D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00916 Published 2024-05-03 No fix listed CWE-259

TI-2023-15447 CVE-2023-32144 · GHSA-g3fv-xj43-xg82

Stack-based buffer overflow in D-Link DAP-1360

MEDIUM 42

D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01038 Published 2024-05-03 No fix listed CWE-121

TI-2023-15446 CVE-2023-32143 · GHSA-7g6f-r888-776w

D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution…

MEDIUM 42

D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01134 Published 2024-05-03 No fix listed CWE-197

TI-2023-15445 CVE-2023-32142 · GHSA-cxqm-79p9-m968

Stack-based buffer overflow in D-Link DAP-1360

MEDIUM 42

D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01101 Published 2024-05-03 No fix listed CWE-121

TI-2023-15444 CVE-2023-32141 · GHSA-jfm6-2h2m-p9x3

Stack-based buffer overflow in D-Link DAP-1360

MEDIUM 42

D-Link DAP-1360 webproc WEB_DisplayPage Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01101 Published 2024-05-03 No fix listed CWE-121

TI-2023-15443 CVE-2023-32140 · GHSA-jxcj-3v7x-m3q6

Heap-based buffer overflow in D-Link DAP-1360

LOW 37

D-Link DAP-1360 webproc var:sys_Token Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00913 Published 2024-05-03 No fix listed CWE-122

TI-2023-15442 CVE-2023-32139 · GHSA-c9jc-74h4-966f

Stack-based buffer overflow in D-Link DAP-1360

MEDIUM 42

D-Link DAP-1360 webproc Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01038 Published 2024-05-03 No fix listed CWE-121

TI-2023-15441 CVE-2023-32138 · GHSA-mh8x-j2pr-59w6

Heap-based buffer overflow in D-Link DAP-1360

MEDIUM 42

D-Link DAP-1360 webproc Heap-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00931 Published 2024-05-03 No fix listed CWE-122

TI-2023-15440 CVE-2023-32137 · GHSA-rc8x-5fp8-vfmj

Path traversal in D-Link DAP-1360

LOW 31

D-Link DAP-1360 webproc WEB_DisplayPage Directory Traversal Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01167 Published 2024-05-03 No fix listed CWE-22

TI-2023-15439 CVE-2023-32136 · GHSA-9vrg-cpf5-hchw

Stack-based buffer overflow in D-Link DAP-1360

MEDIUM 42

D-Link DAP-1360 webproc var:menu Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01155 Published 2024-05-03 No fix listed CWE-121

TI-2024-00658 CVE-2024-0717 · GHSA-27wg-r456-jc87

D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

MEDIUM 63

A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.18195 Published 2024-01-19 No fix listed CWE-200

TI-2014-08190 CVE-2014-10028 · GHSA-vv9p-wrp4-j924

Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4…

LOW 22

Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00995 Published 2015-01-13 No fix listed CWE-79

TI-2014-08189 CVE-2014-10027 · GHSA-9x2g-v43f-pj3g

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that (1) change t…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00785 Published 2015-01-13 No fix listed CWE-352

TI-2014-08188 CVE-2014-10026 · GHSA-rgmw-wjj6-7w2g

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to…

LOW 27

index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the client_login cookie to admin.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02042 Published 2015-01-13 No fix listed CWE-200

TI-2014-08187 CVE-2014-10025 · GHSA-q8hg-956x-hjqc

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with…

LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the (1) Enab…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00785 Published 2015-01-13 No fix listed CWE-352

Vulnerabilities

Filters