Archive
9 October 2020
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Medium 5.9
Missing Authentication for Critical Function in Apache Calcite
HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnerable to man-in-the-middle attacks. Calcite uses internally this method to connect with Druid and Splunk so information leakage may happen wh…
-
Unscored —
Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an insufficient input validation vulnerability. Due to …
-
Unscored —
A cross-site request forgery (CSRF) vulnerability in mod/user/act_user.php in Garfield Petshop through 2020-10-01 allow…
-
Unscored —
Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices allow XSS via Description …
-
Unscored —
The Agent Update System in ConnectWise Automate before 2020.8 allows Privilege Escalation because the _LTUPDATE folder …
-
Critical 9.6
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…
-
Critical 9.6
NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings.
-
Critical 9.6
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.10, RBK752…
-
Critical 9.6
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…
-
Critical 9.6
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK752 before 3.2.15.25, RBR7…
-
Critical 9.6
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.…
-
Critical 9.6
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…
-
Critical 9.6
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…
-
Critical 9.6
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…
-
Critical 9.6
Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects CBR40 before 2.5.0.10, R…
-
Critical 9.6
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.…
-
Critical 9.4
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.36, D7000 before 1.0.1.…
-
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D7800 before 1.0…
-
High 8.4
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects CBR40 before 2.5.0.10,…
-
High 8.3
Certain NETGEAR devices are affected by lack of access control at the function level. This affects D6200 before 1.1.00.…
-
High 7.5
Certain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JR6150 before…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…
-
Medium 6.7
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6200 before 1.1.00.38…
-
Medium 6.0
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 …
-
Medium 5.4
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6200 before 1.1.00.…
-
Medium 4.1
Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 b…
-
Medium 4.1
Certain NETGEAR devices are affected by stored XSS. This affects EX7000 before 1.0.1.78, R6250 before 1.0.4.34, R6400 b…
-
Critical 9.8
NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control at the function level.
KEV Nov 3, 2021 -
High 8.8
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects SRK60 before 2.5…
-
High 8.3
Certain NETGEAR devices are affected by authentication bypass. This affects GS110EMX before 1.0.1.7, GS810EMX before 1.…
-
Medium 6.4
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WC7500 before 6.5.5.24…
-
Medium 4.3
Certain NETGEAR devices are affected by stored XSS. This affects WC7500 before 6.5.5.24, WC7600 before 6.5.5.24, WC7600…
-
Low 3.1
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC720 before 3.9.1.13 and WA…
-
Low 3.2
NETGEAR GS808E devices before 1.7.1.0 are affected by denial of service.
-
Critical 9.6
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15…
-
Critical 9.4
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.…
-
Critical 9.6
Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15…
-
High 7.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.100…
-
Low 3.3
NETGEAR EX7700 devices before 1.0.0.210 are affected by incorrect configuration of security settings.
-
Medium 5.9
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects WC7500 before 6.5.5.24, WC760…