14704 matches found
NETGEAR WNAP320 Access Control Error Vulnerability
The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...
Netgear Routers Buffer Overflow (CVE-2017-6862)
A buffer overflow vulnerability exists in Netgear Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...
CVE-2022-31876
netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...
CVE-2022-31876
netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...
CVE-2022-31876
netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...
Improper access control
netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...
CVE-2022-31876
netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...
CVE-2022-31876
Netgear WNAP320 router (firmware V2.0.3) is affected by an Incorrect Access Control vulnerability in /recreate.php that can leak user cookies. Root cause: insufficient access control on that endpoint. Impact: partial confidentiality (cookies exposed); CVSS ~5.0–5.3 (Network, Low complexity, no au...
NETGEAR WNAP320 security vulnerabilities
The NETGEAR WNAP320 is a wireless access point AP from NETGEAR. An access control error vulnerability exists in the NETGEAR WNAP320 version v2.0.3, which stems from incorrect access control in /recreate.php, which can be exploited by an attacker to obtain a user's cookie...
CVE-2022-31876: Undefined Security Weakness
netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...
PT-2022-20967 · NetGear · Netgear Wnap320
Name of the Vulnerable Software and Affected Versions: Netgear WNAP320 router version WNAP320 V2.0.3 firmware Description: The issue is related to Incorrect Access Control, which can be exploited via the /recreate.php endpoint, potentially leaking all users' cookies. Recommendations: For Netgear...
NETGEAR Multiple Devices Buffer Overflow Vulnerability
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution...
VulnCheck KEV: CVE-2017-6862
Multiple NETGEAR devices contain a buffer overflow vulnerability that allows for authentication bypass and remote code execution...
PT-2022-4903 · NetGear · Netgear N300
Name of the Vulnerable Software and Affected Versions: Netgear N300 wireless router version 1.0.0.70 Description: The issue is related to a stack overflow via strcpy in uhttpd, which can lead to a buffer overflow when processing configuration files in the uHTTPd web server. This can potentially...
CVE-2022-29383
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...
CVE-2022-29383
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...
CVE-2022-29383
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...
Sql injection
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...
CVE-2022-29383
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi...
CVE-2022-29383
NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 are affected by a SQL injection vulnerability in USERDBDomains.Domainname at cgi-bin/platform.cgi. The CVE-2022-29383 entry shows a high/critical impact with network access and no authentication required, affecting multiple firmware version...