EUVD-2016-2005

Malware in sbrugna...

EUVD-2016-2006

Malware in sbrugna...

EUVD-2016-2007

Malware in sbrugna...

CVE-2016-11015

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.XTWSZ-COMURLFilter.BlackList.1.URL parameter...

CVE-2016-11014

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-31241)

NETGEAR JNR1010 and others are products of NETGEAR, Inc.NETGEAR JNR1010 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a...

Injection Vulnerability in Multiple NETGEAR Products (CNVD-2020-31242)

NETGEAR JNR1010 and others are products of NETGEAR, Inc.NETGEAR JNR1010 is a wireless router.NETGEAR D6200 is a wireless modem.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a wireless router.NETGEAR WNR2020 is a...

NETGEAR JNR1010 Cross-Site Request Forgery Vulnerability

The NETGEAR JNR1010 is a wireless router from NETGEAR. A cross-site request forgery vulnerability exists in the NETGEAR JNR1010 prior to version 1.0.0.32. The vulnerability stems from a WEB application that does not adequately validate that a request is coming from a trusted user, and can be...

CVE-2016-11015

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.XTWSZ-COMURLFilter.BlackList.1.URL parameter...

CVE-2016-11014

NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

Cross site scripting

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

CVE-2016-11015

NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.XTWSZ-COMURLFilter.BlackList.1.URL parameter...

CVE-2016-11015

NETGEAR JNR1010 devices prior to firmware 1.0.0.32 are affected by a CSRF vulnerability in the web UI: cgi-bin/webproc can be invoked via the parameter :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL. The issue enables cross-site request forgery. Remediation: upgrade to firmware vers...

CVE-2016-11016

NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS...

PT-2019-7809

Name of the Vulnerable Software and Affected Versions NETGEAR JNR1010 devices versions prior to 1.0.0.32 Description The issue allows for XSS attacks through the webproc?getpage= endpoint. Recommendations For versions prior to 1.0.0.32, update to version 1.0.0.32 or later to resolve the issue...

PT-2019-7807

Name of the Vulnerable Software and Affected Versions NETGEAR JNR1010 versions prior to 1.0.0.32 Description The issue is related to Incorrect Access Control due to the ok value of the auth cookie being a special case. Recommendations For versions prior to 1.0.0.32, update to version 1.0.0.32 or...

PT-2019-7808

Name of the Vulnerable Software and Affected Versions NETGEAR JNR1010 devices versions prior to 1.0.0.32 Description The issue allows for CSRF via the :InternetGatewayDevice.X TWSZ-COM URL Filter.BlackList.1.URL parameter in the cgi-bin/webproc endpoint. Recommendations For versions prior to...