Currently exploited vulnerabilities

CVE ID CVSS Exploitable Vendor Product Vulnerability Date added
CVE-2025-29635 CVSS 3.1 · 7.2 True D-Link DIR-823X D-Link DIR-823X Command Injection Vulnerability 2026-04-24 00:00:00
CVE-2022-37055 CVSS 3.1 · 9.8 True D-Link Routers D-Link Routers Buffer Overflow Vulnerability 2025-12-08 00:00:00
CVE-2022-40799 CVSS 3.1 · 8.8 True D-Link DNR-322L D-Link DNR-322L Download of Code Without Integrity Check Vulnerability 2025-08-05 00:00:00
CVE-2020-25079 CVSS 3.1 · 8.8 True D-Link DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability 2025-08-05 00:00:00
CVE-2020-25078 CVSS 3.1 · 7.5 True D-Link DCS-2530L and DCS-2670L Devices D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability 2025-08-05 00:00:00
CVE-2024-0769 CVSS 3.1 · 5.3 True D-Link DIR-859 Router D-Link DIR-859 Router Path Traversal Vulnerability 2025-06-25 00:00:00
CVE-2023-25280 CVSS 3.1 · 9.8 True D-Link DIR-820 Router D-Link DIR-820 Router OS Command Injection Vulnerability 2024-09-30 00:00:00
CVE-2014-100005 CVSS 3.1 · 8.0 True D-Link DIR-600 Router D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability 2024-05-16 00:00:00
CVE-2021-40655 CVSS 3.1 · 7.5 True D-Link DIR-605 Router D-Link DIR-605 Router Information Disclosure Vulnerability 2024-05-16 00:00:00
CVE-2024-3272 CVSS 3.1 · 9.8 True D-Link Multiple NAS Devices D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability 2024-04-11 00:00:00
CVE-2024-3273 CVSS 3.1 · 7.3 True D-Link Multiple NAS Devices D-Link Multiple NAS Devices Command Injection Vulnerability 2024-04-11 00:00:00
CVE-2016-20017 CVSS 3.1 · 9.8 True D-Link DSL-2750B Devices D-Link DSL-2750B Devices Command Injection Vulnerability 2024-01-08 00:00:00
CVE-2019-20500 CVSS 3.1 · 7.8 True D-Link DWL-2600AP Access Point D-Link DWL-2600AP Access Point Command Injection Vulnerability 2023-06-29 00:00:00
CVE-2019-17621 CVSS 3.1 · 9.8 True D-Link DIR-859 Router D-Link DIR-859 Router Command Execution Vulnerability 2023-06-29 00:00:00
CVE-2011-4723 CVSS 3.1 · 5.7 True D-Link DIR-300 Router D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability 2022-09-08 00:00:00
CVE-2018-6530 CVSS 3.1 · 9.8 True D-Link Multiple Routers D-Link Multiple Routers OS Command Injection Vulnerability 2022-09-08 00:00:00
CVE-2022-26258 CVSS 3.1 · 9.8 True D-Link DIR-820L D-Link DIR-820L Remote Code Execution Vulnerability 2022-09-08 00:00:00
CVE-2019-16057 CVSS 3.1 · 9.8 True D-Link DNS-320 Storage Device D-Link DNS-320 Remote Code Execution Vulnerability 2022-04-15 00:00:00
CVE-2021-45382 CVSS 3.1 · 9.8 True D-Link Multiple Routers D-Link Multiple Routers Remote Code Execution Vulnerability 2022-04-04 00:00:00
CVE-2013-5223 CVSS 3.1 · 5.4 True D-Link DSL-2760U D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability 2022-03-25 00:00:00
CVE-2016-11021 CVSS 3.1 · 7.2 True D-Link DCS-930L Devices D-Link DCS-930L Devices OS Command Injection Vulnerability 2022-03-25 00:00:00
CVE-2019-16920 CVSS 3.1 · 9.8 True D-Link Multiple Routers D-Link Multiple Routers Command Injection Vulnerability 2022-03-25 00:00:00
CVE-2020-9377 CVSS 3.1 · 8.8 True D-Link DIR-610 Devices D-Link DIR-610 Devices Remote Command Execution 2022-03-25 00:00:00
CVE-2015-2051 CVSS 3.1 · 8.8 True D-Link DIR-645 Router D-Link DIR-645 Router Remote Code Execution Vulnerability 2022-02-10 00:00:00
CVE-2020-25506 CVSS 3.1 · 9.8 True D-Link DNS-320 Device D-Link DNS-320 Device Command Injection Vulnerability 2021-11-03 00:00:00
CVE-2020-29557 CVSS 3.1 · 9.8 True D-Link DIR-825 R1 Devices D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability 2021-11-03 00:00:00

AVET INS is an owner of VULNDBASE brand and website. This product uses data from the NVD API but is not endorsed or certified by the NVD. See NVD page for more information. CVE is a registered trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE site. CWE is a registered trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE page. KEV (Known Exploited Vulnerabilities) is a catalog maintained by CISA. EUVD is the official EU repository for timely, curated cybersecurity vulnerability intelligence and remediation guidance run by ENISA. DORA (Digital Operational Resilience Act) is and EU directive.

Copyright AVET INS 1997 - 2026