Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3026▼ 51 respecto a la semana anterior
Críticas / altas1412▲ 58 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)385▼ 125 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.3) | 7.2% | — | Dlink Dsp-w215 Firmware | 25/7/2025 | 17/6/2026 | A stack-based buffer overflow vulnerability in the my_cgi.cgi component of certain D-Link devices, including the DSP-W215 version 1.02, can be exploited via a specially crafted HTTP POST request to the /common/info.cgi endpoint. This flaw enables an unauthenticated attacker to achieve remote code execution with… | |
| Modificada | Alta (7.5) | 1.1% | — | Dlink Dsp-w215 Firmware | 10/8/2021 | 17/6/2026 | Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware revisions is… | |
| Modificada | Alta (7.5) | 1.2% | — | Dlink Dsp-w215 Firmware | 18/5/2020 | 17/6/2026 | D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer. | |
| Modificada | Media (6.5) | 0.75% | — | Dlink Dsp-w215 Firmware | 18/5/2020 | 17/6/2026 | D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy. | |
| Modificada | Alta (10) | 77% | — | Dlink Dir505 Shareport Mobile Companion FirmwareDlink Dir505 Shareport Mobile CompanionDlink Dir505l Shareport Mobile Companion FirmwareDlink Dir-505l Shareport Mobile Companion+2 | 2/6/2014 | 17/6/2026 | Stack-based buffer overflow in the do_hnap function in www/my_cgi.cgi in D-Link DSP-W215 (Rev. A1) with firmware 1.01b06 and earlier, DIR-505 with firmware before 1.08b10, and DIR-505L with firmware 1.01 and earlier allows remote attackers to execute arbitrary code via a long Content-Length header in a… |