Skip to content
OpenAdvisories

Archive

21 April 2020

Vulnerabilities first published on this day (UTC), newest first.

34 results · Clear filters · Feed

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34,…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DM200 befo…

  • Medium 6.5

    NETGEAR GS810EMX devices before 1.0.0.5 are affected by disclosure of sensitive information.

  • Medium 4.5

    Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, …

  • Medium 6.2

    Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 …

  • Medium 6.7

    NETGEAR R7800 devices before 1.0.2.36 are affected by command injection.

  • Medium 4.0

    Malicious URLs can still cause Git to send a stored credential to the wrong server

    Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to CVE-2020-5260(GHSA-qm7j-c969-7j4q). The fix for that bug still left the door open for an expl…

  • Medium 6.7

    Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and D6100 before 1.0.0.50…

  • Medium 6.7

    Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R…

  • Medium 6.2

    Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects R6400 before 1.0.1.…

  • Medium 6.1

    Certain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and R6800 before 1.1.0.42.

  • Medium 6.7

    Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38,…

  • Medium 6.7

    Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, …

  • Medium 6.2

    NETGEAR R7800 devices before 1.0.2.30 are affected by incorrect configuration of security settings.

  • Medium 6.7

    Certain NETGEAR devices are affected by command injection. This affects R7800 before 1.0.2.16 and R9000 before 1.0.2.4.

  • Medium 6.7

    Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WN…

  • Medium 6.7

    Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WN…

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 4.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of se…

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 6.5

    Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET

    In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Saml2 tokens are usually used as bearer tokens - a caller that presents a token is assumed to …

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 4.0

    NETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by incorrect configuration of s…

  • Medium 5.2

    NETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored XSS.

  • Medium 5.2

    Certain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15…