311 matches found
CVE-2017-10813: Improper Neutralization of Special Elements used in an OS Command
CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors...
Corega CG-WLR300NM Buffer Overflow Vulnerability
The Corega CG-WLR300NM is a wireless router from Corega Japan. A buffer overflow vulnerability exists in the Corega CG-WLR300NM using firmware version 1.90 and earlier. An attacker can exploit this vulnerability to execute arbitrary code...
Corega CG-WLR300NM OS Command Execution Vulnerability
The Corega CG-WLR300NM is a wireless router from Corega Japan. A security vulnerability exists in the Corega CG-WLR300NM using firmware version 1.90 and earlier. An attacker can exploit the vulnerability to execute arbitrary operating system commands...
JVN#00719891: Multiple vulnerabilities in CG-WLR300NM
CG-WLR300NM provided by Corega Inc. is a wireless LAN router. CG-WLR300NM contains multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2017-10813 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H| Base Score: 6.8 CVSS v2|...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-7811
Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...
CVE-2016-7810
Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-7809
Cross-site request forgery CSRF vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors...
Design/Logic Flaw
Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...
CVE-2016-7808
Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-7811
Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...
CVE-2016-7808
CVE-2016-7808 affects Corega CG-WLBARGMH and CG-WLBARGNL routers. The issue is a Cross-site Scripting (CWE-79) vulnerability caused by insufficient input filtering in the affected web interfaces, allowing remote attackers to inject arbitrary web script/HTML via unspecified vectors. Multiple conne...
CVE-2016-7810
CVE-2016-7810 affects Corega CG-WLR300NX firmware up to v1.20. It is a Cross-site Scripting (CWE-79) vulnerability that allows an attacker with administrator rights to inject arbitrary web script/HTML via unspecified vectors, potentially causing script execution in the user’s browser. Affected pr...
CVE-2016-7808
Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-7811
The CVE-2016-7811 entry concerns Corega CG-WLR300NX firmware (version 1.20 and earlier). The vulnerability allows an attacker on the same network segment to bypass access restrictions and perform arbitrary operations via unspecified vectors. Public sources (NVD/NVD mirrors, JVN/JVNDB) consistentl...
CVE-2016-7811
Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors...
CVE-2016-7809
The CVE-2016-7809 entry concerns a CSRF vulnerability in Corega CG-WLR300NX firmware versions 1.20 and earlier. Affected product: CG-WLR300NX (wireless router). Vulnerable component: the firmware’s authentication handling allows an attacker to hijack a logged-in user’s session to perform unintend...