CVE-2016-11060

Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10...

CVE-2016-11059

NETGEAR devices are affected by CVE-2016-11059, exposing passwords. The affected models include AC1450, C6300, D500, D1500, D3600, D6000, D6100, D6200, D6200B, D6300B, D6300, DGN1000v3, DGN2200v1/v3, DGN2200V4, DGN2200Bv3/v4, DGND3700v1/v2, DGND3700Bv2, JNR1010v1/v2, JNR3300, JR6100, JR6150, JWNR...

CVE-2016-11059

Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06,...

CVE-2016-11055

Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before...

CVE-2016-11056

Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and earlier and ReadyNAS Surveillance 1.4.1-3-amd64 and earlier...

CVE-2016-11060

The provided data confirms CVE-2016-11060 involves NETGEAR devices affected by insecure TLS renegotiation. Affected products listed are SRX5308, FVS336Gv3, FVS318N, and FVS318Gv2 with vulnerable dates before 2017-02-10. The CNVD entry explicitly describes a Denial of Service impact resulting from...

CVE-2016-11058

The CVE-2016-11058 entry concerns the NETGEAR genie Android app prior to version 2.4.34, which mishandles hard-coded API keys and session IDs. This could enable unauthorized access or session hijacking due to exposed credentials, as reflected by the CVSS scores (2.0/3.1) indicating network-exposu...

CVE-2016-11057

Technical details about CVE-2016-11057 are not publicly available in the provided documents; monitor for updates.

CVE-2016-11056

CVE-2016-11056 affects NETGEAR ReadyNAS Surveillance (ReadyNAS Surveillance 1.1.1-3-armel and earlier; 1.4.1-3-amd64 and earlier). The connected documents describe an anonymous root access vulnerability, implying full compromise of affected devices. No technical root-cause details, affected compo...

CVE-2016-11055

CVE-2016-11055 is a CSRF vulnerability in multiple NETGEAR devices (e.g., CM400/CM600/D1500/D500/DST6501/JNR1010v1/JWNR2000Tv3/JWNR2010v3/PLW1000/PLW1010/WNR500/WNR612v3/N450/CG3000Dv2). Root cause: cross-site request forgery that enables an attacker with a crafted script to log in to the victim’...

CVE-2016-11054

NETGEAR DGN2200v4 devices before 2017-01-06 are affected by a command execution vulnerability and an FTP insecure root directory issue (CVE-2016-11054). Connected sources describe an attacker exploiting the vulnerability to install a backdoor, modify Internet traffic, and access files in the root...

CVE-2016-3393

creationtimestamp| type| source ---|---|--- 2020-04-28 08:18:15+00:00| seen| MISP/5808a24a-2ae8-45cf-85c8-2227bce2ab96 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 15:42:25+00:00| seen| https://t.me/arpsyndicate/969 2024-12-24 20:31:56+00:00| seen|...

Photon OS 1.0: Erlang PHSA-2020-1.0-0289

An update of the erlang package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0289. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13603...

openSUSE Security Update : kubernetes (openSUSE-2020-554) (Dirty COW)

This update introduces kubernetes version 1.14.1 and cri-o 1.17.1 to Leap 15.1. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-554. The text description of this plugin is C SUSE...

Debian: Security Advisory (DLA-2183-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2185-1] eog security update

Package : eog Version : 3.14.1-1+deb8u1 CVE ID : CVE-2016-6855 It was discovered that eog Eye of GNOME incorrectly handled certain invalid UTF-8 strings. If a user were tricked into opening a specially-crafted image, a remote attacker could use this issue to cause Eye of GNOME to crash, resulting...

Security Bulletin: OpenSSL vulnerabilites impacting IBM Aspera Connect 3.7.4 and earlier (CVE-2017-3732, CVE-2016-7055)

Summary The OpenSSL vulnerabilities CVE-2017-3732 CVE-2016-7055 impact IBM Aspera Connect version 3.7.4 and earlier. The fix is delivered in IBM Aspera Connect 3.8.0. Vulnerability Details CVEID: CVE-2017-3732 DESCRIPTION: There is a carry propagating bug in the x8664 Montgomery squaring procedur...

Scientific Linux Security Update : libxml2 on SL7.x x86_64 (20200407)

libxml2: Use after free triggered by XPointer paths beginning with range-to libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate function in xpath.c libxml2: DoS caused by incorrect error detection during XZ decompression libxml2: NULL pointer dereference in xmlXPathCompOpEval functio...

Ovirt Engine Reflected Cross Site Scripting (CVE-2016-3113)

A reflected cross site scripting vulnerability exists in Ovirt Engine. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

EulerOS Virtualization 3.0.2.2 : expat (EulerOS-SA-2020-1445)

According to the versions of the expat packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - XML External Entity vulnerability in libexpat 2.2.0 and earlier Expat XML Parser Library allows attackers to put the parser in an...