The vulnerability of NETGEAR’s Wi-Fi routers—CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850—is related to insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

The vulnerability of the built-in Wi-Fi router software of NETGEAR models CBR750, RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 lies in insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of NETGEAR’s Wi-Fi router software models D3600, D6000, D6200, and D6220 lies in the insufficient protection of operational data, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR models D3600, D6000, D6200, and D6220 lies in the insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of NETGEAR’s Wi-Fi router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, arises from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerability of NETGEAR Wi-Fi router microprogramming systems, such as R6260, R6800, R6700v2, R6900v2, R7450, and AC2100, arises from the possibility of data writing beyond the buffer, allowing attackers to execute arbitrary commands.

The vulnerability of the microprogrammed Wi-Fi router software from NETGEAR, including models R6260, R6800, R6700v2, R6900v2, R7450, and AC2100, lies in the fact that data is written beyond the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of NETGEAR’s integrated router software, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from insufficient cleaning of input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR’s integrated routing software for models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 is related to insufficient cleaning of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

The vulnerabilities of NETGEAR Wi-Fi router microprogramming systems, such as AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450, are related to authentication process flaws, which allow attackers to exploit these vulnerabilities to gain increased privileges.

The vulnerabilities of NETGEAR Wi-Fi router software models AC2400, AC2600, D7000, R6020, R6080, R6120, R6220, R6230, R6260, R6330, R6350, R6700v2, R6800, R6850, R6900v2, R7200, R7350, R7400, and R7450 are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can...

The vulnerability of the Demon 1905 microprogramming system’s MediaTek MT7603E, MT7610, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915 microchips allows attackers to enhance their privileges.

The vulnerability of the MediaTek M7603, M7610, M7613, M7615, M7620, M7622, M7628, M7629, and M7915 microprogrammed software chips lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

The vulnerability of the Wi-Fi driver microprogramming software for MediaTek’s MC7603E, MC7610, MC7612, MC7613, MC7615, MC7620, MC7622, MC7628, MC7629, and MC7915 allows attackers to enhance their privileges.

The vulnerability of Wi-Fi driver microprogramming software microchips from MediaTek, such as MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacke...

CVE-2022-22266

Applicable to China models only Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allows untrusted applications to get WiFi information without proper permission...

CVE-2022-22266

Applicable to China models only Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allows untrusted applications to get WiFi information without proper permission...

Code injection

Applicable to China models only Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allows untrusted applications to get WiFi information without proper permission...

CVE-2021-34087

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver can be used for clickjacking. This includes the settings page...

Improper Access Control in snipe/snipe-it

Description All bulk actions bulk-edit / bulk-delete / form info in asset models do not have access control checks Proof of concept 1: Grant view to Asset Models 2: UI for bulk-edit and bulk-delete is still enabled, proceed. 3: You may bulk-delete / edit any asset model Impact This vulnerability ...

Qualcomm 芯片资源管理错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A resource management error vulnerability exists in...

Security Bulletin: Vulnerability in Apache Log4j affects IBM Banking and Financial Markets Data Warehouse (CVE-2021-44228)

Summary There is a vulnerability in the Apache Log4j open source library used by IBM Banking and Financial Markets Data Warehouse. This affects the Industry Models - Glossary Tools optional component. This vulnerability has been addressed. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION:...

Security Bulletin: IBM Insurance Information Warehouse is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)

Summary There is a vulnerability in the Apache Log4j open source library used by IBM Insurance Information Warehouse. This affects the Industry Models - Glossary Tools optional component. The fix includes Apache Log4j v2.15. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j...

Security Bulletin: IBM Unified Data Model for Healthcare is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)

Summary There is a vulnerability in the Apache Log4j open source library used by IBM Unified Data Model for Healthcare. This affects the Industry Models - Glossary Tools optional component. The fix includes Apache Log4j v2.15. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j...

Security Bulletin: IBM Data Model for Energy and Utilities is vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-44228)

Summary There is a vulnerability in the Apache Log4j open source library is used by IBM Data Model for Energy and Utilities. This affects the Industry Models - Glossary Tools optional component. The fix includes Apache Log4j v2.15. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache...

CVE-2021-45670

Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX6120 before 1.0.0.64, EX6130 before 1.0.0.44, EX7500 before 1.0.0.72, R7000 before 1.0.11.116, R7900 before 1.0.4.38, R8000 before 1.0.4.68, RAX200 before...