Lucene search
NetgearJnr1010 Firmware
3 matches found
CVE-2016-11014
NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case.
9.8CVSS9.4AI score0.00444EPSS
CVE-2016-11016
NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS.
6.1CVSS6.4AI score0.00681EPSS
CVE-2016-11015
NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter.
6.5CVSS6.6AI score0.00244EPSS