Archive
16 April 2020
Vulnerabilities first published on this day (UTC), newest first.
31 results · Clear filters · Feed
-
High 7.6
NETGEAR R7800 devices before 1.0.2.62 are affected by command injection by an authenticated user.
-
High 8.3
NETGEAR R9000 devices before 1.0.4.26 are affected by authentication bypass.
-
High 7.4
NETGEAR R9000 devices before 1.0.4.26 are affected by stored XSS.
-
High 7.4
NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.
-
High 7.1
Certain NETGEAR devices are affected by reflected XSS. This affects EX7000 before 1.0.0.64, EX6200 before 1.0.3.86, EX6…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects DGN2…
-
High 8.4
NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information.
-
High 8.2
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6220 before 1.0…
-
High 8.2
Certain NETGEAR devices are affected by SQL injection. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, D6200…
-
High 8.1
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JNDR3000 before 1.0.…
-
High 8.8
Dolibarr Cross-Site Request Forgery Vulnerability
In Dolibarr 10.0.6, forms are protected with a CSRF token against CSRF attacks. The problem is any CSRF token in any user's session can be used in another user's session. CSRF tokens should not be valid in this situation.
-
High 7.3
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on privilege escalation due to…
-
High 7.1
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
High 7.1
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
High 7.1
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
High 7.1
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
High 8.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.60 …
-
High 8.8
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.60 …
-
High 7.1
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
High 7.5
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects GS105Ev2 before …
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects GS72…
-
High 8.3
Certain NETGEAR devices are affected by CSRF. This affects D3600 before 1.0.0.72, D6000 before 1.0.0.72, EX3700 before …
-
High 7.5
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.30, D7000 before 1.0.1.…
-
High 8.8
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D360…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D360…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D360…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D360…
-
High 8.8
RCE vulnerability in Jenkins Yaml Axis Plugin
Jenkins Yaml Axis Plugin 0.2.0 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
-
High 8.8
RCE vulnerability in Jenkins AWS SAM Plugin
Jenkins AWS SAM Plugin 1.2.2 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerability.
-
High 7.1
XXE vulnerability in Jenkins Parasoft Findings Plugin
Jenkins Parasoft Findings Plugin 10.4.3 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.