D-view 8 (Dlink) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2026-01-21. Vendor: Dlink.
CVEs of D-view 8
- CVE-2026-23755 - CVSS 8.4 (high), 2026-01-21: D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer. When executed with elevated privileges via…
- CVE-2026-23754 - CVSS 8.8 (high), 2026-01-21: D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in backend API endpoints. Any authenticated user can supply an…
- CVE-2024-5299 - CVSS 8.8 (high), 2024-05-23: D-Link D-View execMonitorScript Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
- CVE-2024-5298 - CVSS 8.8 (high), 2024-05-23: D-Link D-View queryDeviceCustomMonitorResult Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to…
- CVE-2024-5297 - CVSS 8.8 (high), 2024-05-23: D-Link D-View executeWmicCmd Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on…
- CVE-2024-5296 - CVSS 9.8 (critical), 2024-05-23: D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on…
- CVE-2023-44414 - CVSS 9.8 (critical), 2024-05-03: D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
- CVE-2023-44413 - CVSS 7.5 (high), 2024-05-03: D-Link D-View shutdown_coreserver Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a…
- CVE-2023-44412 - CVSS 8.2 (high), 2024-05-03: D-Link D-View addDv7Probe XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose…
- CVE-2023-44411 - CVSS 9.8 (critical), 2024-05-03: D-Link D-View InstallApplication Use of Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass…
- CVE-2023-44410 - CVSS 8.8 (high), 2024-05-03: D-Link D-View showUsers Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on…
- CVE-2023-32169 - CVSS 9.8 (critical), 2024-05-03: D-Link D-View Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on…
- CVE-2023-32168 - CVSS 8.8 (high), 2024-05-03: D-Link D-View showUser Improper Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on…
- CVE-2023-32166 - CVSS 8.1 (high), 2024-05-03: D-Link D-View uploadFile Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on…
- CVE-2023-32165 - CVSS 9.8 (critical), 2024-05-03: D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
- CVE-2023-32164 - CVSS 7.5 (high), 2024-05-03: D-Link D-View TftpSendFileThread Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive…
- CVE-2023-32167 - CVSS 6.5 (medium), 2024-05-03: D-Link D-View uploadMib Directory Traversal Arbitrary File Creation or Deletion Vulnerability. This vulnerability allows remote attackers to create and delete…
- CVE-2023-7163 - CVSS 10 (critical), 2023-12-28: A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This…
- CVE-2023-5074 - CVSS 9.8 (critical), 2023-09-20: Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28
