dlink

1,699 tracked vulnerabilities.

CVE-2019-19222 MEDIUM
D-Link DSL-2680 Firmware EU_1.03 - XSS
Mar 04, 2020
CVSS 5.4
EPSS 0.01
CVE-2019-20217 CRITICAL
D-Link DIR-859 1.05 and 1.06B01 Beta01 - Unauthenticated OS Command Injection via M-SEARCH urn Parameter
Jan 29, 2020
CVSS 9.8
EPSS 0.06
CVE-2019-20216 CRITICAL
D-Link DIR-859 1.05 and 1.06B01 - Unauthenticated OS Command Injection via M-SEARCH urn Parameter
Jan 29, 2020
CVSS 9.8
EPSS 0.05
CVE-2019-20215 CRITICAL
D-Link DIR-859 1.05 and 1.06B01 - Unauthenticated OS Command Injection via M-SEARCH Method
Jan 29, 2020
CVSS 9.8
EPSS 0.90
CVE-2019-17146 CRITICAL
D-Link DCS-935L <1.12.101 & DCS-960L <1.07.102 - Unauthenticated Stack Overflow via HNAP
Jan 07, 2020
CVSS 9.8
EPSS 0.18
CVE-2019-20213 HIGH
D-Link DIR-859 Firmware < 1.07b03_beta - Unauthenticated Information Disclosure via AUTHORIZED_GROUP Parameter
Jan 02, 2020
CVSS 7.5
EPSS 0.01
CVE-2019-17621 CRITICAL KEV
D-Link DIR-859 Firmware < 1.05b03 - Unauthenticated Remote Code Execution via UPnP gena.cgi
Dec 30, 2019
CVSS 9.8
EPSS 0.93
CVE-2019-16327 CRITICAL
D-Link DIR-601 B1 2.00NA - Auth Bypass
Dec 26, 2019
CVSS 9.8
EPSS 0.00
CVE-2019-16326 HIGH
D-Link DIR-601 B1 2.00NA - Cross-Site Request Forgery
Dec 26, 2019
CVSS 8.8
EPSS 0.00
CVE-2019-6014 HIGH
DBA-1510P Firmware <= 1.70b009 - OS Command Injection via Web User Interface
Dec 26, 2019
CVSS 8.8
EPSS 0.02
CVE-2019-6013 MEDIUM
DBA-1510P Firmware < 1.70b009 - Authenticated OS Command Injection via CLI
Dec 26, 2019
CVSS 6.6
EPSS 0.00
CVE-2019-19742 MEDIUM
D-Link DIR-615 Firmware - Stored Cross-Site Scripting via User Account Name Field
Dec 18, 2019
CVSS 4.8
EPSS 0.04
CVE-2019-19743 MEDIUM
D-Link DIR-615 - Privilege Escalation
Dec 16, 2019
CVSS 6.5
EPSS 0.14
CVE-2019-19598 HIGH
D-Link DAP-1860 <1.04b03 Beta - Auth Bypass
Dec 05, 2019
CVSS 8.8
EPSS 0.01
CVE-2019-19597 HIGH
D-Link DAP-1860 <v1.04b03 Beta - RCE
Dec 05, 2019
CVSS 8.8
EPSS 0.11
CVE-2019-18852 CRITICAL
D-Link DIR-600 B1, DIR-615 J1, DIR-645 A1, DIR-815 A1, DIR-823 A1, DIR-842 C1, DIR-890L A1 - Hardcoded Credentials
Nov 11, 2019
CVSS 9.8
EPSS 0.01
CVE-2019-17512 CRITICAL
D-Link DIR-412 A1-1.14WW - Unauthenticated Log Clearing via log_clear.php
Oct 16, 2019
CVSS 9.1
EPSS 0.04
CVE-2019-17511 HIGH
D-Link DIR-412 A1-1.14WW - Unauthenticated Information Disclosure via log_get.php
Oct 14, 2019
CVSS 7.5
EPSS 0.04
CVE-2019-17510 CRITICAL
D-Link DIR-846 Firmware 100A35 - Authenticated OS Command Injection via SetWizardConfig HNAP1 Request
Oct 11, 2019
CVSS 9.8
EPSS 0.04
CVE-2019-17509 CRITICAL
D-Link DIR-846 Firmware 100A35 - Authenticated OS Command Injection via SetMasterWLanSettings HNAP1 Request
Oct 11, 2019
CVSS 9.8
EPSS 0.04
CVE-2019-17508 CRITICAL
D-Link DIR-859 A3-1.06 and DIR-850 A1.13 - OS Command Injection via DEVICE.TIME.php
Oct 11, 2019
CVSS 9.8
EPSS 0.67
CVE-2019-17507 HIGH
D-Link DIR-816 A1 1.06 - Unauthenticated Access to Management Pages via Client-Side Redirect Bypass
Oct 11, 2019
CVSS 7.5
EPSS 0.00
CVE-2019-17506 CRITICAL NUCLEI
D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 - Unauthenticated Information Disclosure via getcfg.php
Oct 11, 2019
CVSS 9.8
EPSS 0.94
CVE-2019-17505 HIGH
D-Link DAP-1320 A2-V1.21 - Unauthenticated Information Disclosure via uplink_info.xml
Oct 11, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-17353 HIGH
D-Link DIR-615 Firmware 20.05 and 20.07 - Unauthenticated Information Disclosure and Data Modification via wan.htm
Oct 09, 2019
CVSS 8.2
EPSS 0.00
Products
dir-816_firmware 73 dir-605l_firmware 65 dir-619l_firmware 65 dir-823g_firmware 57 dap-2622_firmware 54 dns-320_firmware 52 dir-513_firmware 47 dns-320lw_firmware 45 dns-325_firmware 45 dns-340l_firmware 45 dns-343_firmware 43 dnr-202l_firmware 42 dnr-326_firmware 42 dns-1100-4_firmware 42 dns-1200-05_firmware 42 dns-120_firmware 42 dns-1550-04_firmware 42 dns-315l_firmware 42 dns-320l_firmware 42 dns-321_firmware 42 dns-323_firmware 42 dns-326_firmware 42 dns-327l_firmware 42 dns-345_firmware 42 dns-726-4_firmware 42 dir-823x_firmware 39 dir-878_firmware 39 dap-1325_firmware 37 dir-600l_firmware 36 di-8003_firmware 35
Quick Filters
Critical CVEs With Exploits In CISA KEV