Archive
27 April 2020
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
High 7.0
Insufficient Session Expiration in Kiali
An insufficient JWT validation vulnerability was found in Kiali versions 0.4.0 to 1.15.0 and was fixed in Kiali version 1.15.1, wherein a remote attacker could abuse this flaw by stealing a valid JWT cookie and using that to spoof a user session, possibly gai…
-
High 7.5
OOB Read in urldecode()
In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array i…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX27…
-
High 8.8
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03…
-
High 8.8
NETGEAR R7800 devices before 1.0.2.46 are affected by incorrect configuration of security settings.
-
High 8.8
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0…
-
High 7.6
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
High 7.6
NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
-
High 7.1
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC5…
-
High 7.3
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7,…