Lucene search
+L

12213 matches found

OSV
OSV
added 2023/12/15 5:15 p.m.6 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS5.9AI score0.04007EPSS
SaveExploits1References2
NVD
NVD
added 2023/12/15 5:15 p.m.19 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

9.8CVSS0.04007EPSS
SaveExploits1References2
Prion
Prion
added 2023/12/15 5:15 p.m.24 views

Command injection

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

7.5CVSS7.8AI score0.04007EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2023/12/15 12:0 a.m.58 views

CVE-2023-50089

CVE-2023-50089 affects NETGEAR WNR2000v4, specifically version 1.0.0.70. The issue is a command injection that arises when using HTTP for SOAP authentication, allowing command execution after successful authentication. The CVSS vector in the record indicates a network -facing, high/critical impac...

9.8CVSS9.8AI score0.04007EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/12/15 12:0 a.m.10 views

NETGEAR WNR2000 安全漏洞

The NETGEAR WNR2000 is a wireless router from NETGEAR. A command execution vulnerability exists in NETGEAR WNR2000 v4 version 1.0.0.70, which stems from an application failing to properly filter constructed command special characters, commands, and more. An attacker could exploit this vulnerabili...

9.8CVSS7.3AI score0.04007EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/12/15 12:0 a.m.26 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

10AI score0.04007EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/12/15 12:0 a.m.9 views

CVE-2023-50089

A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. When using HTTP for SOAP authentication, command execution occurs during the process after successful authentication...

7.6AI score0.04007EPSS
SaveExploits1References2
CNVD
CNVD
added 2023/12/13 12:0 a.m.8 views

NETGEAR RBR750 Buffer Overflow Vulnerability

The NETGEAR RBR750 is a home WiFi system from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR RBR750 prior to version V7.2.6.21, which originates from a boundary error in /usr/sbin/httpd when handling untrusted input. A remote attacker could exploit this vulnerability to execute...

9.8CVSS8.3AI score0.08972EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:0 a.m.7 views

The vulnerability of the strlcpy() function in Netgear Orbi RBR750 router software allows a hacker to cause a service failure.

The vulnerability of the strlcpy function in Netgear Orbi RBR750 router software lies in the fact that the operation escapes the buffer boundaries when processing the lengths of the X-Forwarded-For and X-Forwarded-Proto headers. Exploiting this vulnerability allows a remote attacker to cause...

10CVSS8AI score0.08972EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/12/08 2:15 p.m.7 views

CVE-2023-49007

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...

9.8CVSS6.2AI score0.08972EPSS
SaveExploits1References1
NVD
NVD
added 2023/12/08 2:15 p.m.34 views

CVE-2023-49007

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...

9.8CVSS0.08972EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/08 2:15 p.m.26 views

Stack overflow

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...

7.5CVSS7.8AI score0.08972EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/08 12:0 a.m.6 views

NETGEAR RBR750 安全漏洞

The NETGEAR RBR750 is a home WiFi system from NETGEAR. A buffer overflow vulnerability exists in the NETGEAR RBR750 prior to version V7.2.6.21, which originates from a boundary error in /usr/sbin/httpd when handling untrusted input. A remote attacker could exploit this vulnerability to execute...

9.8CVSS9.6AI score0.08972EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/12/08 12:0 a.m.37 views

CVE-2023-49007

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...

9.9AI score0.08972EPSS
SaveExploits1References1
CVE
CVE
added 2023/12/08 12:0 a.m.55 views

CVE-2023-49007

CVE-2023-49007 affects Netgear Orbi RBR750 prior to firmware 7.2.6.21. A stack-based buffer overflow in /usr/sbin/httpd is caused by boundary handling of inputs; an attacker could exploit this remotely (network vector) to cause crash or arbitrary code execution. Affected versions require upgradin...

9.8CVSS9.6AI score0.08972EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2023/12/06 12:0 a.m.30 views

NETGEAR Access Control Error Vulnerability (CNVD-2023-9749744)

NETGEAR is a router from the American company NETGEAR. A hardware device that connects two or more networks and acts as a gateway between networks. An access control error vulnerability exists in the NETGEAR ProSAFE Network Management System v1.7.0.26 and earlier versions, which can be exploited ...

7.8CVSS7.2AI score0.00537EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/12/01 12:0 a.m.6 views

NETGEAR ProSAFE Network Management System Access Control Error Vulnerability

NETGEAR ProSAFE Network Management System is a network management system from NETGEAR for centralized management, monitoring, and configuration of network devices. An Access Control Error vulnerability exists in the NETGEAR ProSAFE Network Management System that originates from an unauthenticated...

9.8CVSS7.5AI score0.01154EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/11/30 12:0 a.m.11 views

PT-2023-7869 · NetGear · Netgear Wnr2000V4

Name of the Vulnerable Software and Affected Versions: NETGEAR WNR2000v4 version 1.0.0.70 Description: A Command Injection issue exists when using HTTP for SOAP authentication, allowing command execution after successful authentication. This can be exploited by sending specially crafted HTTP...

9.8CVSS10AI score0.04007EPSS
SaveExploits1References9
NVD
NVD
added 2023/11/29 11:15 p.m.26 views

CVE-2023-49693

NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol JDWP listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code...

9.8CVSS0.01154EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/29 11:15 p.m.7 views

CVE-2023-49694

A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. The user can then execute the JSP files under the security context of SYSTEM...

7.8CVSS6AI score0.00537EPSS
SaveExploits1References2
Rows per page
Query Builder