dlink

1,699 tracked vulnerabilities.

CVE-2020-29321 HIGH
D-Link DIR-868L 3.01 - Info Disclosure
Jun 04, 2021
CVSS 7.5
EPSS 0.01
CVE-2020-27600 CRITICAL
D-Link DIR-846 A1_100.26 - OS Command Injection via SSID Parameter
Apr 02, 2021
CVSS 9.8
EPSS 0.62
CVE-2020-27865 HIGH
D-Link DAP-1860 Firmware < 1.04b03 - Unauthenticated Remote Code Execution via uhttpd String Matching Flaw
Feb 12, 2021
CVSS 8.8
EPSS 0.24
CVE-2020-27864 HIGH
D-Link DAP-1860 Firmware < 1.04b03 - Unauthenticated Remote Code Execution via HNAP Authorization Header
Feb 12, 2021
CVSS 8.8
EPSS 0.16
CVE-2020-27863 MEDIUM
D-Link DVA-2800 and DSL-2888A - Unauthenticated Sensitive Information Disclosure via dhttpd Service
Feb 12, 2021
CVSS 6.5
EPSS 0.02
CVE-2020-27862 HIGH
D-Link DVA-2800 and DSL-2888A - Unauthenticated Remote Code Execution via dhttpd Path Parameter
Feb 12, 2021
CVSS 8.8
EPSS 0.03
CVE-2020-18568 CRITICAL
D-Link DSR-250/DSR-1000N - Command Injection
Feb 02, 2021
CVSS 9.8
EPSS 0.44
CVE-2020-25506 CRITICAL KEVNUCLEI
D-Link DNS-320 FW v2.06B01 Revision Ax - OS Command Injection in system_mgr.cgi
Feb 02, 2021
CVSS 9.8
EPSS 0.94
CVE-2020-29557 CRITICAL KEV
D-Link DIR-825 R1 Firmware < 3.0.1 - Unauthenticated Remote Code Execution via Web Interface Buffer Overflow
Jan 29, 2021
CVSS 9.8
EPSS 0.91
CVE-2020-24577 HIGH
D-Link DSL-2888A <AU_2.31_V1.1.47ae55 - Info Disclosure
Jan 08, 2021
CVSS 7.5
EPSS 0.17
CVE-2020-24581 HIGH
D-Link DSL-2888A <AU_2.31_V1.1.47ae55 - Command Injection
Dec 22, 2020
CVSS 8.0
EPSS 0.89
CVE-2020-24580 HIGH
D-Link DSL-2888A <AU_2.31_V1.1.47ae55 - Info Disclosure
Dec 22, 2020
CVSS 7.5
EPSS 0.00
CVE-2020-24579 HIGH NUCLEI
D-Link DSL-2888A <AU_2.31_V1.1.47ae55 - Auth Bypass
Dec 22, 2020
CVSS 8.8
EPSS 0.85
CVE-2020-24578 MEDIUM
D-Link DSL-2888A <AU_2.31_V1.1.47ae55 - Info Disclosure
Dec 22, 2020
CVSS 6.5
EPSS 0.20
CVE-2020-25759 HIGH
D-Link DSR Unified Services Router Firmware < 3.17 - Authenticated OS Command Injection via Multipart HTTP POST Request
Dec 15, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-25758 HIGH
D-Link DSR-250 <3.17 - Code Injection
Dec 15, 2020
CVSS 8.8
EPSS 0.00
CVE-2020-25757 HIGH
D-Link DSR VPN Routers < 3.17 - Unauthenticated OS Command Injection via Lua CGI
Dec 15, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-26567 MEDIUM
D-Link DSR-250N < 3.17b - Unauthenticated Denial of Service via upgradeStatusReboot.cgi
Oct 08, 2020
CVSS 5.5
EPSS 0.29
CVE-2020-26582 HIGH
D-Link DAP-1360U <3.0.1 - Command Injection
Oct 06, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-25786 MEDIUM
D-Link DIR-803 and DIR-816L Firmware - Cross-Site Scripting via HTTP Referer Header
Sep 19, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-25079 HIGH KEV
D-Link DCS-2530L < 1.06.01 and DCS-2670L <= 2.02 - Authenticated Command Injection via ddns_enc.cgi
Sep 02, 2020
CVSS 8.8
EPSS 0.42
CVE-2020-25078 HIGH KEVNUCLEI
D-Link DCS-2530L <1.06.01 - Info Disclosure
Sep 02, 2020
CVSS 7.5
EPSS 0.94
CVE-2020-15632 HIGH
D-Link DIR-842 3.13B05 - Auth Bypass
Jul 23, 2020
CVSS 8.8
EPSS 0.04
CVE-2020-15631 HIGH
D-Link DAP-1860 Firmware < 1.04b01 - Authenticated OS Command Injection via HNAP SOAPAction Header
Jul 23, 2020
CVSS 8.0
EPSS 0.02
CVE-2020-15896 HIGH
D-Link DAP-1522 Firmware < 1.10b04Beta02 - Unauthenticated Authentication Bypass via NO_NEED_AUTH Parameter
Jul 22, 2020
CVSS 7.5
EPSS 0.03