CVE-2025-4149

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been classified as critical. This affects the function sub54014. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but di...

CVE-2025-4148

A vulnerability was found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this issue is the function sub503FC. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2025-4149 Netgear EX6200 sub_54014 buffer overflow

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been classified as critical. This affects the function sub54014. The manipulation of the argument host leads to buffer overflow. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but di...

CVE-2025-4148

The CVE-2025-4148 entry concerns NETGEAR EX6200 (firmware 1.0.3.94). The vulnerability affects the sub_503FC function where the host argument is not properly validated in length, leading to a buffer overflow. This can be exploited remotely, potentially allowing arbitrary code execution or a crash...

CVE-2025-4147

A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this vulnerability is the function sub47F7C. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure...

CVE-2025-4147 Netgear EX6200 sub_47F7C buffer overflow

A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. Affected by this vulnerability is the function sub47F7C. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure...

CVE-2025-4146 Netgear EX6200 sub_41940 buffer overflow

A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. Affected is the function sub41940. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did no...

CVE-2025-4145

CVE-2025-4145 affects Netgear EX6200, v1.0.3.94. The root cause is a buffer overflow in the sub_3D0BC function triggered by improper handling of the host argument, allowing remote exploitation. Public sources confirm a high/severe impact (remote code execution or DoS) with network attack vector a...

CVE-2025-4139

A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68. Affected by this vulnerability is the function fwAcosCgiInbound. The manipulation of the argument host leads to buffer overflow. The attack can be launched remotely. The vendor was contacted early about this disclosure b...

CVE-2025-4135

A vulnerability was found in Netgear WG302v2 up to 5.2.9 and classified as critical. Affected by this issue is the function uigetinputvalue. The manipulation of the argument host leads to command injection. The attack may be launched remotely. The vendor was contacted early about this disclosure...

CVE-2025-4122

Netgear JWNR2000v2 is affected by CVE-2025-4122 due to a vulnerability in the function sub_435E04 where manipulating the host argument leads to command injection. Affected version: 1.0.0.11. Exploitation may be remote. Multiple sources corroborate the issue; no official fix details are provided i...

CVE-2025-4121

A vulnerability was found in Netgear JWNR2000v2 1.0.0.11. It has been declared as critical. Affected by this vulnerability is the function cmdwireless. The manipulation of the argument host leads to command injection. The attack can be launched remotely. The vendor was contacted early about this...

CVE-2025-4117

A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function sub41A914. The manipulation of the argument host leads to buffer overflow. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-4116

A vulnerability, which was classified as critical, has been found in Netgear JWNR2000v2 1.0.0.11. Affected by this issue is the function getcurlangver. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. The vendor was contacted early about this...

CVE-2025-4117 Netgear JWNR2000v2 sub_41A914 buffer overflow

A vulnerability, which was classified as critical, was found in Netgear JWNR2000v2 1.0.0.11. This affects the function sub41A914. The manipulation of the argument host leads to buffer overflow. The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-4115

Netgear JWNR2000v2 (version 1.0.0.11) is affected by CVE-2025-4115 due to a buffer overflow in the default_version_is_new function when the host argument is manipulated. This vulnerability can be exploited remotely and has widely reported high-severity scores across multiple sources. The connecte...

CVE-2025-4114

Netgear JWNR2000v2 firmware 1.0.0.11 is affected by a buffer overflow in the check_language_file function when processing the host argument. This vulnerability can be exploited remotely over the network to potentially execute arbitrary code or cause a denial of service. Multiple sources (NVD, CNV...

CVE-2025-3980

A vulnerability classified as problematic was found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This vulnerability affects unknown code of the file /v1/prescription/list. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has...

CVE-2025-32472 DoS attack by conducting a slowloris-type attack

The multiScan and picoScan are vulnerable to a denial-of-service DoS attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type attack, causing the web page to become unresponsive...

CVE-2025-4018 20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue affects the function addCrawlSource of the file novel-crawl/src/main/java/com/java2nb/novel/controller/CrawlController.java. The manipulation leads t...