Lucene search
+L

130 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/10 12:00 a.m.10 views

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface of Netgear SRX5308 integrated software routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP...

3.3CVSS5.1AI score0.00649EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:00 a.m.10 views

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request usin...

3.3CVSS5.1AI score0.00605EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:00 a.m.15 views

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request using...

3.3CVSS5.1AI score0.00605EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:00 a.m.12 views

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request usin...

3.3CVSS5.1AI score0.00649EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:00 a.m.10 views

The web interface of Netgear’s SRX5308 router software has vulnerabilities that allow attackers to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Netgear SRX5308 integrated software routers exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP request using...

3.3CVSS5.1AI score0.00605EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:00 a.m.11 views

The vulnerability of Netgear SRX5308 router microprogramming software, related to improper release of resources, allows a hacker to trigger a service failure.

The vulnerability of Netgear SRX5308 micro-programmed software routers is related to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.8CVSS6.5AI score0.01295EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2023/05/06 12:00 a.m.37 views

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43029)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that stems from incorrect manipulation of the parameter winsServer1. An attacker can exploit the vulnerability to execute client-side code...

4.8CVSS6.3AI score0.00605EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/05/06 12:00 a.m.28 views

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43023)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from a misuse of the parameter ConfigPort.LogicalIfName. An attacker can exploit this vulnerability to obtain sensitive information such as user...

4.8CVSS5.8AI score0.00649EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/28 10:15 p.m.8 views

CVE-2023-2396

A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument USERDBUsers.Password leads to cross site scripting. The attack can be initiated remotely. The...

6.1CVSS3.8AI score0.00802EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 10:15 p.m.7 views

CVE-2023-2395

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Management Interface. The manipulation of the argument Login.userAgent leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS3.8AI score0.00802EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/28 10:15 p.m.24 views

Cross site scripting

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Management Interface. The manipulation of the argument Login.userAgent leads to cross site scripting. It is possible to initiate the attack remotely. The...

5CVSS6AI score0.00802EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2023/04/28 10:15 p.m.22 views

Cross site scripting

A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument USERDBUsers.Password leads to cross site scripting. The attack can be initiated remotely. The...

5CVSS6AI score0.00802EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/04/28 10:00 p.m.27 views

CVE-2023-2396 Netgear SRX5308 Web Management Interface cross site scripting

A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument USERDBUsers.Password leads to cross site scripting. The attack can be initiated remotely. The...

5CVSS6.2AI score0.00802EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/04/28 9:31 p.m.28 views

CVE-2023-2395 Netgear SRX5308 Web Management Interface cross site scripting

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Management Interface. The manipulation of the argument Login.userAgent leads to cross site scripting. It is possible to initiate the attack remotely. The...

5CVSS6.1AI score0.00802EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/04/28 9:31 p.m.9 views

CVE-2023-2395 Netgear SRX5308 Web Management Interface cross site scripting

A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the component Web Management Interface. The manipulation of the argument Login.userAgent leads to cross site scripting. It is possible to initiate the attack remotely. The...

5CVSS6AI score0.00802EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 9:15 p.m.14 views

CVE-2023-2394

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument wanName leads to cross site scripting. The attack may be launched remotely...

4.8CVSS3.5AI score0.00649EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 9:15 p.m.9 views

CVE-2023-2392

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site...

4.8CVSS3.7AI score0.00649EPSS
SaveExploits1References3
NVD
NVD
added 2023/04/28 9:15 p.m.27 views

CVE-2023-2392

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site...

4.8CVSS3.9AI score0.00649EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 9:15 p.m.10 views

CVE-2023-2393

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file scgi-bin/platform.cgi?page=dmzsetup.htm of the component Web Management Interface. The manipulation of the argument...

4.8CVSS3.7AI score0.00649EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 9:15 p.m.11 views

CVE-2023-2391

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site...

4.8CVSS3.7AI score0.00649EPSS
SaveExploits1References3
Rows per page
Query Builder