Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Explore Sources Research Browse

Production

Loading current evidence

Loading the latest cvebuzz view.

© 2026 cvebuzz. CVE data courtesy of the National Vulnerability Database.

Subscribe via Atom About Browse CVEs Research Contact Privacy Policy Terms of Service

Search the full CVE archive | cvebuzz

Trending
Browse CVEs

Historical archive search

Search the full CVE archive

Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.

Years with data: 28
Top vendors indexed: 100

FiltersRefine the archive+

Search by CVE ID or description (supports basic regex, e.g. log4j|struts)

Quick date range

Last 7 days Last 30 days Last 90 days

Severity (select multiple)

Critical (43,370)High (124,781)Medium (163,227)Low (17,939)Unrated (2,051)

Attack vector (select multiple)

Results

CVE results

1,765 results · Sorted by Highest Buzz score first

CVE-2018-9284

Published Apr 4, 2018

authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

dlink / dir-868ldlink / singapore_starhub_firmware

Network

Adjacent network

Local

Physical

CVSS minCVSS max

Year

CWEEnter a numeric ID such as 79 or the prefixed form CWE-79.

VendorBetaChoose an indexed vendor suggestion or enter another vendor.ProductBeta

Only show CVEs with KEV evidence

Only show CVEs with public PoC evidence

Only show CVEs with mention evidence

Only show CVEs with AlienVault OTX activity

Sort

Published Apr 3, 2018

Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authenticated remote attackers to execute arbitrary code via a long A…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

d-link / dsl-3782_firmwaredlink / dsl-3782

CVE-2018-5708

Published Mar 30, 2018

An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator's panel, a user can obtain the adm…

CVSS 8.0 · High

Vendor/product tagsBeta · best-effort

dlink / dir-601dlink / dir-601_firmware

CVE-2018-9032

Published Mar 27, 2018

An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Version : A1, B1; Firmware Version : 1.02-2.06) devices potentia…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2018-6529

Published Mar 6, 2018

XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous ve…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

dlink / dir-860ldlink / dir-860l_firmwaredlink / dir-865ldlink / dir-865l_firmwaredlink / dir-868ldlink / dir-868l_firmware

CVE-2018-6528

Published Mar 6, 2018

XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous v…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

dlink / dir-860ldlink / dir-860l_firmwaredlink / dir-865ldlink / dir-865l_firmwaredlink / dir-868ldlink / dir-868l_firmware

CVE-2018-6527

Published Mar 6, 2018

XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previ…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

dlink / dir-860ldlink / dir-860l_firmwaredlink / dir-865ldlink / dir-865l_firmwaredlink / dir-868ldlink / dir-868l_firmware

CVE-2018-6936

Published Feb 21, 2018

Cross Site Scripting (XSS) exists on the D-Link DIR-600M C1 3.01 via the SSID or the name of a user account.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

d-link / dir-600m_c1_firmwaredlink / dir-600m_c1

CVE-2018-5371

Published Jan 12, 2018

diag_ping.cmd on D-Link DSL-2640U devices with firmware IM_1.00 and ME_1.00, and DSL-2540U devices with firmware ME_1.00, allows authenticated remote attackers to execute arbitrar…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

d-link / dsl-2540u_firmwared-link / dsl-2640u_firmwaredlink / dsl-2540udlink / dsl-2640u

CVE-2017-3193

Published Dec 16, 2017

Multiple D-Link devices including the DIR-850L firmware versions 1.14B07 and 2.07.B05 contain a stack-based buffer overflow vulnerability in the web administration interface HNAP…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2017-3192

Published Dec 16, 2017

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials. The tools_admin.asp page discloses the administrator…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

d-link / dir-130_firmwared-link / dir-330_firmwaredlink / dir-130dlink / dir-330

CVE-2017-3191

Published Dec 16, 2017

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page. A remote attacker that can access the remo…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

d-link / dir-130_firmwared-link / dir-330_firmwaredlink / dir-130dlink / dir-330

CVE-2017-17065

Published Nov 30, 2017

An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication values for HNAP. An attacker can cause a…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

dlink / dir-605l_model_bdlink / dir-605l_model_b_firmware

CVE-2017-7851

Published Nov 15, 2017

D-Link DCS-936L devices with firmware before 1.05.07 have an inadequate CSRF protection mechanism that requires the device's IP address to be a substring of the HTTP Referer heade…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

d-link / dcs-936ldlink / dcs-936l

CVE-2017-16765

Published Nov 10, 2017

XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

dlink / dwr-933dlink / dwr-933_firmware

CVE-2016-10699

Published Oct 31, 2017

D-Link DSL-2740E 1.00_BG_20150720 devices are prone to persistent XSS attacks in the username and password fields: a remote unauthenticated user may craft logins and passwords wit…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

dlink / dsl-2740edlink / dsl-2740e_firmware

CVE-2017-15909

Published Oct 26, 2017

D-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote attackers to obtain shell access.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

dlink / dgs-1500dlink / dgs-1500_firmware

CVE-2017-14430

Published Sep 13, 2017

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allow remote attackers to cause a denial of service (dae…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2017-14429

Published Sep 13, 2017

The DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices allows unauthenticated remote code ex…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2017-14428

Published Sep 13, 2017

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/hostapd* permissions.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2017-14427

Published Sep 13, 2017

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/run/storage_account_root permissions.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2017-14426

Published Sep 13, 2017

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0644 /var/etc/shadow (aka the /etc/shadow symlink t…

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2017-14425

Published Sep 13, 2017

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/etc/hnapasswd permissions.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2017-14424

Published Sep 13, 2017

D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware through FW208WWb02) devices have 0666 /var/passwd permissions.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

CVE-2017-14423

Published Sep 13, 2017

htdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices does not prevent unauthenticated nonce-guessing attacks, which mak…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

dlink / dir-850ldlink / dir-850l_firmware

Showing 1,651-1,675 of 1,765 CVEsPage 67 of 71

Previous 1 66 67 68 71 Next

About these shareable results+

Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.

Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.