Archive
29 December 2020
Vulnerabilities first published on this day (UTC), newest first.
18 results · Clear filters · Feed
-
High 8.4
NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection.
-
High 7.5
NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.
-
High 7.1
NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.
-
High 8.3
NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service.
-
High 8.1
Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.…
-
High 8.3
NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-20…
-
High 8.0
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76,…
-
High 7.6
NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user.
-
High 8.8
NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user.
-
High 8.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.4…
-
High 8.4
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBS40V before 2.6.1.4,…
-
High 8.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D360…
-
High 8.3
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.…
-
High 7.5
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.14, RBW30 …
-
High 7.6
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7800 before 1.0.1.58, R7800 …
-
High 8.8
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects CBR40 before 2.5…
-
High 8.1CVE-2020-17533 Public exploit
Apache Accumulo Improper Handling of Insufficient Permissions
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values o…
-
High 8.8
Command Injection Vulnerability in QTS and QuTS hero
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero.