Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3023▼ 71 respecto a la semana anterior
Críticas / altas1419▲ 54 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
16 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.99% | — | Dlink Dir-803 FirmwareDlink Dir-816l FirmwareDlink Dir-645 FirmwareDlink Dir-815 Firmware+2 | 19/9/2020 | 17/6/2026 | webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and… | |
| Modificada | Alta (7.5) | 0.90% | — | Dlink Dir-865l Firmware | 3/6/2020 | 17/6/2026 | D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Transmission of Sensitive Information. | |
| Modificada | Alta (8.8) | 0.69% | — | Dlink Dir-865l Firmware | 3/6/2020 | 17/6/2026 | D-Link DIR-865L Ax 1.20B01 Beta devices allow CSRF. | |
| Modificada | Alta (7.5) | 0.59% | — | Dlink Dir-865l Firmware | 3/6/2020 | 17/6/2026 | D-Link DIR-865L Ax 1.20B01 Beta devices have Inadequate Encryption Strength. | |
| Modificada | Alta (7.5) | 1.3% | — | Dlink Dir-865l Firmware | 3/6/2020 | 17/6/2026 | D-Link DIR-865L Ax 1.20B01 Beta devices have a predictable seed in a Pseudo-Random Number Generator. | |
| Modificada | Alta (7.5) | 0.90% | — | Dlink Dir-865l Firmware | 3/6/2020 | 17/6/2026 | D-Link DIR-865L Ax 1.20B01 Beta devices have Cleartext Storage of Sensitive Information. | |
| Modificada | Alta (8.8) | 27% | — | Dlink Dir-865l Firmware | 3/6/2020 | 17/6/2026 | D-Link DIR-865L Ax 1.20B01 Beta devices allow Command Injection. | |
| Modificada | Alta (7.5) | 2.2% | — | Dlink Dir-859 FirmwareDlink Dir-822 FirmwareDlink Dir-823 FirmwareDlink Dir-865l Firmware+10 | 2/1/2020 | 17/6/2026 | D-Link DIR-859 routers before v1.07b03_beta allow Unauthenticated Information Disclosure via the AUTHORIZED_GROUP=1%0a value, as demonstrated by vpnconfig.php. | |
| Analizada | Crítica (9.8) | 90% | ⚠ Explotación activa | Dlink Dir-859 FirmwareDlink Dir-822 FirmwareDlink Dir-823 FirmwareDlink Dir-865l Firmware+10 | 30/12/2019 | 17/6/2026 | The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, by sending a specially crafted HTTP SUBSCRIBE request to the UPnP service when connecting to the local network. | |
| Modificada | Crítica (9.8) | 1.6% | — | Dlink Dir-865l Firmware | 25/10/2019 | 16/6/2026 | D-Link DIR-865L has PHP File Inclusion in the router xml file. | |
| Modificada | Media (6.5) | 0.87% | — | Dlink Dir-865l Firmware | 25/10/2019 | 16/6/2026 | D-Link DIR-865L has Information Disclosure. | |
| Modificada | Alta (8.8) | 1.5% | — | Dlink Dir-865l Firmware | 25/10/2019 | 16/6/2026 | D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share. | |
| Analizada | Crítica (9.8) | 97% | ⚠ Explotación activa | Dlink Dir-860l FirmwareDlink Dir-865l FirmwareDlink Dir-868l FirmwareDlink Dir-880l Firmware | 6/3/2018 | 17/6/2026 | OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous… | |
| Modificada | Media (6.1) | 1.6% | — | Dlink Dir-860l FirmwareDlink Dir-865l FirmwareDlink Dir-868l Firmware | 6/3/2018 | 17/6/2026 | XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to… | |
| Modificada | Media (6.1) | 1.6% | — | Dlink Dir-860l FirmwareDlink Dir-865l FirmwareDlink Dir-868l Firmware | 6/3/2018 | 17/6/2026 | XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to… | |
| Modificada | Media (6.1) | 1.6% | — | Dlink Dir-860l FirmwareDlink Dir-865l FirmwareDlink Dir-868l Firmware | 6/3/2018 | 17/6/2026 | XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid… |