Lucene search
+L

75 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/26 12:00 a.m.•7 views

CVE-2021-45551: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6050 before 1.0.1.26, JR6150 before 1.0.1.26, R6120 before 1.0.0.66, R6220 before 1.1.0.110, R6230 before...

8.8CVSS5.8AI score0.0151EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/26 12:00 a.m.•6 views

CVE-2021-45534: Improper Neutralization of Special Elements used in a Command

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects AC2100 before 1.2.0.88, AC2400 before 1.2.0.88, AC2600 before 1.2.0.88, D7000 before 1.0.1.82, R6220 before 1.1.0.110, R6230 before 1.1.0.110, R6260 before 1.1.0.84, R6330 before 1.1.0.84, R6350 befor...

7.8CVSS5.8AI score0.01092EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/12/26 12:00 a.m.•15 views

Netgear NETGEAR 缓冲区错误漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in certain NETGEAR devices that can be exploited by an unauthenticated attacker to conduct a stack-based buff...

9.8CVSS9AI score0.01199EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/11/02 12:00 a.m.•15 views

The vulnerability of the setupwizard.cgi component in NETGEAR Wi-Fi router software models such as AC2100, AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6350, R6330, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, R7450, and WAC124 allows a hacker to execute arbitrary code.

The vulnerability of the setupwizard.cgi component in NETGEAR Wi-Fi routers such as AC2100, AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6350, R6330, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, R7450, and WAC124 lies in buffer overflow in the stack. Exploiting this...

8.8CVSS8.3AI score0.0152EPSS
SaveExploits0References4Affected Software19
OSV
OSV
•added 2021/08/11 12:17 a.m.•14 views

CVE-2021-38536

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.7...

4.8CVSS5.8AI score0.00464EPSS
SaveExploits0References1
OSV
OSV
•added 2021/08/11 12:17 a.m.•16 views

CVE-2021-38531

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2...

7.2CVSS5.8AI score0.00418EPSS
SaveExploits0References1
NVD
NVD
•added 2021/08/11 12:17 a.m.•32 views

CVE-2021-38531

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2...

7.2CVSS0.00418EPSS
SaveExploits0References1
Prion
Prion
•added 2021/08/11 12:17 a.m.•29 views

Design/Logic Flaw

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2...

6.5CVSS7AI score0.00418EPSS
SaveExploits0References1Affected Software12
Prion
Prion
•added 2021/08/11 12:17 a.m.•30 views

Cross site scripting

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.7...

3.5CVSS5AI score0.00464EPSS
SaveExploits0References1Affected Software19
Prion
Prion
•added 2021/08/11 12:17 a.m.•33 views

Cross site scripting

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.7...

3.5CVSS5AI score0.00464EPSS
SaveExploits0References1Affected Software19
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/11 12:00 a.m.•3 views

CVE-2021-38531: Undefined Security Weakness

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.42, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2...

7.2CVSS5.8AI score0.00418EPSS
SaveExploits0References1
CVE
CVE
•added 2021/08/10 11:59 p.m.•109 views

CVE-2021-38535

CVE-2021-38535 is a stored cross-site scripting (XSS) vulnerability affecting a range of NETGEAR routers. Affected devices and firmware ranges include D6200 (< 1.1.00.40), D7000 (< 1.0.1.78), R6020 (< 1.0.0.48), R6080 (< 1.0.0.48), R6120 (< 1.0.0.76), R6260 (< 1.1.0.78), R6700v2...

4.8CVSS5AI score0.00464EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/08/10 11:59 p.m.•44 views

CVE-2021-38535

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.7...

4.3CVSS5.3AI score0.00464EPSS
SaveExploits0References1
CVE
CVE
•added 2021/08/10 11:59 p.m.•109 views

CVE-2021-38536

Summary: CVE-2021-38536 is a stored cross-site scripting vulnerability in multiple NETGEAR routers. Affected devices/versions include D6200 <1.1.00.40, D7000 <1.0.1.78, R6020 <1.0.0.48, R6080 <1.0.0.48, R6120 <1.0.0.66, R6260 <1.1.0.78, R6700v2 <1.2.0.76, R6800 <1.2.0.76, ...

4.8CVSS5AI score0.00464EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/10 12:00 a.m.•5 views

CVE-2021-38537: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.7...

4.8CVSS5.8AI score0.00357EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/10 12:00 a.m.•5 views

CVE-2021-38535: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.76, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.7...

4.8CVSS5.8AI score0.00464EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/10 12:00 a.m.•6 views

CVE-2021-38536: Improper Neutralization of Input During Web Page Generation

Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.48, R6080 before 1.0.0.48, R6120 before 1.0.0.66, R6260 before 1.1.0.78, R6700v2 before 1.2.0.76, R6800 before 1.2.0.76, R6900v2 before 1.2.0.76, R6850 before 1.1.0.7...

4.8CVSS5.8AI score0.00464EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/11 12:00 a.m.•8 views

CVE-2020-27867: Improper Neutralization of Special Elements used in a Command

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 routers. Although authentication is required to exploit...

7.7CVSS6.6AI score0.02234EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/02/11 12:00 a.m.•19 views

Command Injection Vulnerability in Multiple Netgear Products

Netgear NETGEAR R8900 and others are products of Netgear, Inc.NETGEAR R8900 is a wireless router.NETGEAR R9000 is a wireless router.NETGEAR R7800 is a wireless router. A command injection vulnerability exists in a number of NETGEAR routers, which arises from a network system or product not proper...

7.7CVSS6.8AI score0.02234EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/02/11 12:00 a.m.•22 views

Multiple Netgear Products Licensing Issues Vulnerabilities

Netgear NETGEAR WNR2020 and others are products of Netgear, Inc.NETGEAR WNR2020 is a wireless router.NETGEAR R6220 is a wireless router.NETGEAR R6700v2 is a wireless router. An authorization issue vulnerability exists in multiple NETGEAR routers that stems from a lack of authentication measures o...

8.8CVSS7.2AI score0.08656EPSS
SaveExploits0References3
Rows per page
Query Builder