Lucene search
+L

14704 matches found

CNVD
CNVD
•added 2022/06/21 12:00 a.m.•142 views

NETGEAR WNAP320 Access Control Error Vulnerability

The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...

5.3CVSS5.1AI score0.01276EPSS
SaveExploits1References1
Check Point Advisories
Check Point Advisories
•added 2022/06/20 12:00 a.m.•47 views

Netgear Routers Buffer Overflow (CVE-2017-6862)

A buffer overflow vulnerability exists in Netgear Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

7.5CVSS7.6AI score0.45748EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/06/17 8:15 p.m.•8 views

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.3CVSS5.3AI score0.01276EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/06/17 8:15 p.m.•19 views

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.3CVSS5.8AI score0.01276EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/17 8:15 p.m.•41 views

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.3CVSS0.01276EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/17 8:15 p.m.•33 views

Improper access control

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5CVSS5.3AI score0.01276EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/17 7:15 p.m.•43 views

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.6AI score0.01276EPSS
SaveExploits1References2
CVE
CVE
•added 2022/06/17 7:15 p.m.•92 views

CVE-2022-31876

Netgear WNAP320 router (firmware V2.0.3) is affected by an Incorrect Access Control vulnerability in /recreate.php that can leak user cookies. Root cause: insufficient access control on that endpoint. Impact: partial confidentiality (cookies exposed); CVSS ~5.0–5.3 (Network, Low complexity, no au...

5.3CVSS5.2AI score0.01276EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•17 views

NETGEAR WNAP320 security vulnerabilities

The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...

5.3CVSS5.6AI score0.01276EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/17 12:00 a.m.•5 views

CVE-2022-31876: Undefined Security Weakness

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

5.3CVSS5.8AI score0.01276EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/06/17 12:00 a.m.•17 views

PT-2022-20967 · NetGear · Netgear Wnap320

Name of the Vulnerable Software and Affected Versions: Netgear WNAP320 router version WNAP320 V2.0.3 firmware Description: The issue is related to Incorrect Access Control, which can be exploited via the /recreate.php endpoint, potentially leaking all users' cookies. Recommendations: For Netgear...

5.3CVSS5.1AI score0.01276EPSS
SaveExploits1References5
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/08 12:00 a.m.•57 views

NETGEAR Multiple Devices Buffer Overflow Vulnerability

Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution...

9.8CVSS4.5AI score0.45748EPSS
SaveIn wildExploits0
VulnCheck KEV
VulnCheck KEV
•added 2022/06/07 12:00 a.m.•12 views

VulnCheck KEV: CVE-2017-6862

Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution...

9.8CVSS7.8AI score0.45748EPSS
SaveIn wildExploits0References5
Positive Technologies
Positive Technologies
•added 2022/05/31 12:00 a.m.•23 views

PT-2022-4903 · NetGear · Netgear N300

Name of the Vulnerable Software and Affected Versions: Netgear N300 wireless router version 1.0.0.70 Description: The issue is related to a stack overflow via strcpy in uhttpd, which can lead to a buffer overflow when processing configuration files in the uHTTPd web server. This can potentially...

9.8CVSS9.6AI score0.01231EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2022/05/13 1:15 p.m.•24 views

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...

9.8CVSS7.3AI score0.48537EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/13 1:15 p.m.•21 views

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...

9.8CVSS7.3AI score0.48537EPSS
SaveExploits1References4
NVD
NVD
•added 2022/05/13 1:15 p.m.•39 views

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...

9.8CVSS0.48537EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/13 1:15 p.m.•25 views

Sql injection

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...

7.5CVSS9.8AI score0.48537EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/05/13 12:49 p.m.•51 views

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...

10AI score0.48537EPSS
SaveExploits1References2
CVE
CVE
•added 2022/05/13 12:49 p.m.•137 views

CVE-2022-29383

NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 are affected by a SQL injection vulnerability in USERDBDomains.Domainname at cgi-bin/platform.cgi. The CVE-2022-29383 entry shows a high/critical impact with network access and no authentication required, affecting multiple firmware version...

9.8CVSS9.8AI score0.48537EPSS
SaveIn wildExploits1References2Affected Software1
Rows per page
Query Builder