Input Validation and Logic

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

1. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Auth…CVE-2020-8864D-Link · CVSS 8.8 · 82% likely

   CWE-697

2. On D-Link DAP-1530 (A1) before firmware version 1.06b01, DAP-1610 (A1) before firmware version 1.06b01, DWR-111 (A1) before firmware version 1.02v02, DWR-116 (A1) before firmware…CVE-2018-19300D-Link · 74% likely

   CWE-20

3. D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.CVE-2022-36620Dlink · 24% likely

   CWE-1284

4. D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tp_usrname will be decrypted by base64, and the result will be sto…CVE-2022-37134Dlink · 22% likely

   CWE-1284

5. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not requi…CVE-2020-8862D-Link · CVSS 8.8 · 13% likely

   CWE-697

6. On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.CVE-2017-9675Dlink · 12% likely

   CWE-20

7. The web proxy service on the D-Link DIR-100 with firmware 1.12 and earlier does not properly filter web requests with large URLs, which allows remote attackers to bypass web restr…CVE-2008-4133D-Link · 4.2% likely

   CWE-20

8. D-Link DAR-7000 webmailattach.php Privilege EscalationCVE-2023-5143D-Link · CVSS 6.3 · 3.6% likely

   CWE-20

9. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-1935 1.03 routers. Authentication is not required to exploit…CVE-2022-43621D-Link · CVSS 8.8 · 2.1% likely

   CWE-697

10. D-Link D-View 8 Unauthenticated Probe-Core Server CommunicationCVE-2023-7163D-Link · CVSS 10 · 1.7% likely

    CWE-20

11. An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dir_login.a…CVE-2019-17507Dlink · 1.6% likely

    CWE-20

12. An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication values for HNAP. An attacker can cause a…CVE-2017-17065Dlink · 1.4% likely

    CWE-20

13. D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allow remote attackers to cause a denial of service (dae…CVE-2017-14430Dlink · 1.4% likely

    CWE-20

14. The Ping tools web interface in Dlink Di-604 router allows remote authenticated users to cause a denial of service via a large "ip textfield" size.CVE-2010-2293D-Link · 1.2% likely

    CWE-20

15. D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.CVE-2023-31814Dlink · CVSS 9.8 · 0.9% likely

    CWE-706

16. D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_42AF30(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a craft…CVE-2024-27659Dlink · CVSS 6.5 · 0.6% likely

    CWE-395

17. D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a craft…CVE-2024-27658Dlink · CVSS 6.5 · 0.6% likely

    CWE-395

18. D-Link G416 httpd Improper Handling of Exceptional Conditions Information Disclosure VulnerabilityCVE-2023-50212D-Link · CVSS 4.3 · 0.5% likely

    CWE-755

19. D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_4110f4(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a cra…CVE-2024-27662Dlink · CVSS 6.5 · 0.4% likely

    CWE-395

20. D-Link DIR-823G A1V1.0.2B05 was discovered to contain Null-pointer dereferences in sub_4484A8(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a craft…CVE-2024-27661Dlink · CVSS 6.5 · 0.4% likely

    CWE-395

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.