Skip to content
OpenAdvisories

Archive

16 April 2020

Vulnerabilities first published on this day (UTC), newest first.

66 results · Clear filters · Feed

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

  • Medium 4.4

    Stored XSS on back office edit page

    In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list block with the title field. The problem is fixed in 3.1.0

  • Medium 4.1

    Stored XSS with custom URLs in PrestaShop module ps_linklist

    In PrestaShop module ps_linklist versions before 3.1.0, there is a stored XSS when using custom URLs. The problem is fixed in version 3.1.0

  • Medium 4.1

    Reflected XSS with social networks fields

    PrestaShop module ps_facetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

  • Medium 6.8

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D8500 before 1.0.3.43,…

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.62 are affected by command injection by an authenticated user.

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6220 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects DGN2200 before 1.0.0.5…

  • Medium 4.8

    Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 be…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 4.8

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6150v2 before 1.0.1.76, R7500…

  • Medium 4.8

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6100v2 before 1.0.1.76, EX615…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 4.3

    Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800…

  • Medium 6.4

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.10.2…

  • Medium 6.1

    NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information.

  • Medium 5.2

    NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.

  • Medium 5.2

    NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.

  • Medium 6.3

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200v4 …

  • Medium 4.3

    NETGEAR R8500 devices before v1.0.2.128 are affected by a buffer overflow by an unauthenticated attacker.

  • Medium 5.2

    Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.34, JNR1010v…

  • Medium 5.6

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D622…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6000 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befo…

  • Medium 5.6

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D622…

  • Medium 5.6

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.40,…

  • Medium 5.6

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.40,…

  • Medium 6.3

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6400 before 1.0.0.74,…

  • Medium 6.8

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before 1.0.0.63,…

  • Medium 6.8

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75,…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75,…

  • Medium 5.4

    Dolibarr stored Cross-site Scripting vulnerability

    In Dolibarr 10.0.6, if USER_LOGIN_FAILED is active, there is a stored XSS vulnerability on the admin tools --> audit page. This may lead to stealing of the admin account.

  • Medium 6.5

    Negative charge in shopping cart possible in Shopizer

    In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping car…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44,…