CVE-2023-38095

NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is...

CVE-2023-35754

D-Link DAP-2622 DDP Set AG Profile NMS URL Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-50231 NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is required to exploi...

CVE-2023-50231 NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is required to exploi...

CVE-2023-44449

NETGEAR ProSAFE Network Management System is affected by a SQL Injection in clearAlertByIds, caused by insufficient validation of user input used to build SQL queries. This allows a remote attacker with authentication to escalate privileges to protected resources. The flaw is documented across mu...

CVE-2023-44450

CVE-2023-44450 affects NETGEAR ProSAFE Network Management System. Impact comes from the getNodesByTopologyMapSearch function, where unsanitized user input is used to build SQL queries, enabling remote code execution with SYSTEM privileges after authentication. Multiple sources (NVD, ZDI, CVE list...

CVE-2023-38102 NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability

NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to exploit...

CVE-2023-38102

NETGEAR ProSAFE Network Management System is affected by CVE-2023-38102 through the createUser function, which allows privilege escalation due to missing authorization prior to performing the action. The flaw can be abused after authentication, as the authentication mechanism can be bypassed, ena...

CVE-2023-38101 NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability

NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is...

CVE-2023-38101

CVE-2023-38101 affects NETGEAR ProSAFE Network Management System, with the vulnerable surface in the SettingConfigController class. The flaw arises from an exposed dangerous function that enables remote code execution, allowing attackers to run code with SYSTEM privileges on affected installation...

CVE-2023-38098 NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is required to...

CVE-2023-38096

CVE-2023-38096 affects NETGEAR ProSAFE Network Management System. The flaw resides in the MyHandlerInterceptor authentication mechanism, representing an improper implementation that allows remote attackers to bypass authentication (no user interaction required). Impact is high on confidentiality,...

CVE-2023-38096 NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability

NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to exploit this...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from an authentication bypass vulnerability that can be exploited by an attacker to bypass authentication...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a SQL injection vulnerability that can be exploited by an attacker to elevate privileges...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. An elevation of privilege vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to elevate privileges...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. NETGEAR ProSAFE suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE is a network management system from NETGEAR. An elevation of privilege vulnerability exists in NETGEAR ProSAFE, which can be exploited by an attacker to elevate privileges...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE Network Management System is a network management system from NETGEAR for centralized management, monitoring, and configuration of network devices. A code execution vulnerability exists in NETGEAR ProSAFE Network Management System, which stems from a remote code execution...

NETGEAR ProSAFE 安全漏洞

NETGEAR ProSAFE Network Management System is a network management system. The NETGEAR ProSAFE Network Management System suffers from a SQL injection vulnerability that originates in the getNodesByTopologyMapSearch function, which can be exploited by an attacker to obtain sensitive information or...