Dns 327L Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:d-link:dns-327l_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | D Link (f324da99-07b9-589f-a800-1ce04a08f309) |
|---|---|
| Product | Dns 327L Firmware (04ad6414-724d-505f-8b7e-9e57905e509a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-7860 |
vulnerable | 2026-06-08 05:06:00.294655 |
Details available
The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate requests, which allows remote attackers to obtain arbitrary photos and publish them to an arbitrary Facebook profile via a target album_id and access_token.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T13:03:27.361Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7859 |
vulnerable | 2026-06-08 05:06:00.292325 |
Details available
Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-326 before 2.10 build 03, and DNS-327L before 1.04b01 allows remote attackers to execute arbitrary code by crafting malformed "Host" and "Referer" header values.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T13:03:27.420Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7857 |
vulnerable | 2026-06-08 05:06:00.286367 |
Details available
D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgi_set_wto command in the cmd parameter, and setting the spawned session's cookie to username=admin.
Published: 2017-08-25T18:00:00.000Z
Updated: 2024-08-06T13:03:27.574Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.