CVE Intelligence

Vulnerabilidades de Dlink

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Dlink: 408 registro(s), com severidade, exploração e correções.

Dir-513 Firmware 39DNS-340L 32DNS-320 32Dns-320 Firmware 29DNS-327L 28Di-8003 Firmware 28DNS-320L 27Dir-600l Firmware 27DNS-345 27Dir-823x Firmware 26DIR-823X 25Dns-343 Firmware 25DNS-325 25Dns-320l Firmware 24Dns-120 Firmware 24Dnr-202l Firmware 24Dns-315l Firmware 24Dns-320lw Firmware 24Dns-321 Firmware 24Dns-323 Firmware 24Dns-325 Firmware 24Dns-326 Firmware 24Dns-327l Firmware 24Dnr-326 Firmware 24Dns-340l Firmware 24Dns-345 Firmware 24Dns-726-4 Firmware 24Dns-1100-4 Firmware 24Dns-1200-05 Firmware 24Dns-1550-04 Firmware 24DNR-326 23DNS-1100-4 23DNS-326 23DNS-315L 23DNR-202L 23DNS-120 23DNS-320LW 23DNR-322L 23DNS-321 23DNS-323 23

Somente exploradas (KEV) →

CVE-2025-50665 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request via the name, en, time, mem_gb2312, and mem_utf8 parameters.
CVE-2025-50664 Alta · 7.5 CWE-121 08/04/2026
Stack-based Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /user_group.asp endpoint. The attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, mem, pri, and attr.
CVE-2025-50663 Alta · 7.5 CWE-121 08/04/2026
Stack-based Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /usb_paswd.asp endpoint.
CVE-2025-50662 Alta · 7.5 CWE-121 08/04/2026
Stack-based Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /url_group.asp endpoint.
CVE-2025-50661 Alta · 7.5 CWE-121 08/04/2026
Stack-based Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /url_rule.asp endpoint. An attacker can exploit this vulnerability by sending a crafted HTTP GET request with parameters name, en, ips, u, time, act, rpri, and log.
CVE-2025-50660 Alta · 7.5 CWE-121 08/04/2026
Stack-based Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /url_member.asp endpoint.
CVE-2025-50659 Alta · 7.5 CWE-121 08/04/2026
Stack-based Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the custom_error parameter in the /user.asp endpoint.
CVE-2025-50657 Alta · 7.5 CWE-121 08/04/2026
Stack-based Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the pid parameter in the /trace.asp endpoint.
CVE-2025-50655 Alta · 7.5 CWE-121 08/04/2026
Stack-based Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name parameter in the /thd_group.asp endpoint.
CVE-2025-50654 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of the id parameter in the /thd_member.asp endpoint.
CVE-2025-50653 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of the name and mem parameters in the /time_group.asp endpoint.
CVE-2025-50652 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
An issue in D-Link DI-8003 16.07.26A1 related to improper handling of the id parameter in the /saveparm_usb.asp endpoint.
CVE-2025-50650 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate validation of input size in the routes_static parameter in the /router.asp endpoint.
CVE-2025-50649 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper input validation in the vlan_name parameter in the /shut_set.asp endpoint.
CVE-2025-50648 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to inadequate input validation in the /tggl.asp endpoint.
CVE-2025-50647 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1, specifically in the handling of the wans parameter in the qos.asp endpoint.
CVE-2025-50646 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to insufficient input validation on the name parameter in the /qos_type_asp.asp endpoint.
CVE-2025-50645 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated. By sending a crafted request with an excessively large value for the s parameter, an attacker can trigger a buffer overflow condition.
CVE-2025-50644 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8003 Firmware
A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper validation of user input in the qj.asp endpoint.
CVE-2025-52222 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8100 Firmware
D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v16.07.26A1, and DI-8100G v17.12.20A1 were discovered to contain a buffer overflow via the rd_en, rd_auth, rd_acct, http_hadmin, http_hadminpwd, rd_key, and rd_ip parameters in the radius_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-45059 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8300 Firmware
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fn parameter in the tgfile_htm function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-45058 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8300 Firmware
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the fx parameter in the jingx_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-45057 Alta · 7.5 CWE-120 08/04/2026
Classic Buffer Overflow em Dlink Di-8300 Firmware
D-Link DI-8300 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2026-5312 Média · 5.3 CWE-266 01/04/2026
D-Link DNS-1550-04 dsk_mgr.cgi Get_current_raidtype access control
A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected by this vulnerability is the function FMT_restart/Status_HDInfo/SMART_List/ScanDisk_info/ScanDisk/volume_status/Get_Volume_Mapping/FMT_check_disk_remount_state/FMT_rebuildinfo/FMT_result_list/FMT_result_list_phy/FMT_get_dminfo/FMT_manually_rebuild_info/Get_current_raidtype of the file /cgi-bin/dsk_mgr.cgi. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
CVE-2026-5311 Média · 5.3 CWE-266 01/04/2026
D-Link DNS-1550-04 file_center.cgi Webdav_Access_List access control
A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function Webdav_Access_List of the file /cgi-bin/file_center.cgi. Performing a manipulation of the argument cmd results in improper access controls. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.