12213 matches found
EUVD-2021-32340
Malicious code in bioql PyPI...
EUVD-2021-32363
Malicious code in bioql PyPI...
EUVD-2021-32392
Malicious code in bioql PyPI...
EUVD-2023-38364
Malicious code in bioql PyPI...
EUVD-2022-46650
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2014-4927
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in ACME microhttpd, as used in D-Link DSL2750U and DSL2740U and NetGear WGR614 and MR- ADSL-DG834 routers allows remote attackers to cause a...
Netgear DGN1000B Code Execution Vulnerability
The Netgear DGN1000B is a wireless router from the American company Netgear. A code execution vulnerability exists in the Netgear DGN1000B version 1.1.00.24 and 1.1.00.45, which stems from insufficient cleanup of setup.cgi endpoint inputs, and can be exploited by an attacker to potentially cause...
Netgear DGN2200B Code Execution Vulnerability
The Netgear DGN2200B is a wireless router from Netgear USA. A code execution vulnerability exists in Netgear DGN2200B 1.0.0.36 and earlier versions, which stems from insufficient pppoe.cgi endpoint input cleanup, and can be exploited by an attacker to potentially cause remote code execution...
Netgear SPH200D Directory Traversal Vulnerability
The Netgear SPH200D is a wireless Internet phone from Netgear USA. The Netgear SPH200D suffers from a directory traversal vulnerability that can be exploited by an attacker to view arbitrary files on the system by sending a crafted URL request...
The vulnerability in the pppoe.cgi script of Netgear DGN2200B router software allows a hacker to execute arbitrary commands.
The vulnerability of the pppoe.cgi script of the Netgear DGN2200B router operating system is related to the failure to take measures to neutralize special elements used in the operating system when processing the pppoeusername parameter. Exploiting this vulnerability allows a remote attacker to...
The vulnerability of the cmd_wireless() function in Netgear’s JWNR2000v2 router software allows a hacker to execute arbitrary commands.
The vulnerability of the cmdwireless function in Netgear JWNR2000v2 router microprogramming software is related to the lack of data cleaning measures at the control level when processing the host parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
The vulnerability in the setup.cgi script of Netgear DGN1000B router software allows a hacker to execute arbitrary commands.
The vulnerability in the setup.cgi script of Netgear DGN1000B router microprogramming software relates to the failure to take measures to neutralize special elements used in the operating system’s command for handling the TimeToLive parameter. Exploiting this vulnerability allows a remote attacke...
The vulnerability of the sub_41A914() function in Netgear JWNR2000v2 software allows a hacker to cause a service failure.
The vulnerability of the sub41A914 function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability can allow an attacker to cause service interruption...
The vulnerability of the default_version_is_new() function in Netgear’s JWNR2000v2 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the defaultversionisnew function in Netgear’s JWNR2000v2 router software lies in the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrit...
The vulnerability of the ui_get_input_value() function in Netgear WG302v2 router microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the uigetinputvalue function in Netgear WG302v2 router microprogramming software is related to the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...
The vulnerability of the sub_435E04() function in Netgear JWNR2000v2 software allows a hacker to execute arbitrary commands.
The vulnerability of the sub435E04 function in Netgear JWNR2000v2 microprogrammed software lies in the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...
The vulnerability of the sub_4238E8() function in Netgear JWNR2000v2 microprogrammed software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the sub4238E8 function in Netgear JWNR2000v2 microprogrammed software lies in the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...
The vulnerability of the get_cur_lang_ver() function in Netgear’s JWNR2000v2 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the getcurlangver function in Netgear JWNR2000v2 router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability can allow an attacker to compromise the...
CVE-2013-10060
An authenticated OS command injection vulnerability exists in Netgear routers tested on the DGN2200B model firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted input to the pppoeusername parameter. Thi...
CVE-2013-10063
A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions = 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal sequences. This can expose sensitive...