EUVD-2024-21151

Malicious code in bioql PyPI...

CVE-2024-23690 EOL Netgear FVS336v3 Telnet Configuration Backup Command Injection

The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backupconfiguration" commands...

CVE-2024-23690: Improper Neutralization of Special Elements used in an OS Command

The end-of-life Netgear FVS336Gv2 and FVS336Gv3 are affected by a command injection vulnerability in the Telnet interface. An authenticated and remote attacker can execute arbitrary OS commands as root over Telnet by sending crafted "util backupconfiguration" commands...

PT-2020-7989

Name of the Vulnerable Software and Affected Versions: NETGEAR SRX5308 versions prior to 2017-02-10 NETGEAR FVS336Gv3 versions prior to 2017-02-10 NETGEAR FVS318N versions prior to 2017-02-10 NETGEAR FVS318Gv2 versions prior to 2017-02-10 Description: The issue is related to insecure renegotiatio...

PT-2017-7739

Name of the Vulnerable Software and Affected Versions NETGEAR FVS336Gv3 versions prior to 4.3.3-8 NETGEAR FVS318N versions prior to 4.3.3-8 NETGEAR FVS318Gv2 versions prior to 4.3.3-8 NETGEAR SRX5308 versions prior to 4.3.3-8 Description The issue allows remote authenticated users to read arbitra...

CVE-2016-10106: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in scgi-bin/platform.cgi on NETGEAR FVS336Gv3, FVS318N, FVS318Gv2, and SRX5308 devices with firmware before 4.3.3-8 allows remote authenticated users to read arbitrary files via a .. dot dot in the thispage parameter, as demonstrated by reading the /etc/shadow fi...