Archive
26 December 2021
Vulnerabilities first published on this day (UTC), newest first.
47 results · Clear filters · Feed
-
Medium 6.7
Out-of-bounds Write in nix
An issue was discovered in the nix crate 0.16.0 and later before 0.20.2, 0.21.x before 0.21.2, and 0.22.x before 0.22.2 for Rust. unistd::getgrouplist has an out-of-bounds write if a user is in more than 16 /etc/groups groups.
-
Medium 6.3
Cross-Site Request Forgery (CSRF) in star7th/showdoc
showdoc is vulnerable to Cross-Site Request Forgery (CSRF)
-
Medium 5.4
Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat
livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
-
Medium 6.5
NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass.
-
Medium 6.5
NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass.
-
Medium 6.8
Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 202…
-
Medium 6.5
Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, …
-
Medium 6.9
Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126,…
-
Medium 6.5
NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
-
Medium 6.5
NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
-
Medium 6.5
NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
-
Medium 6.1
NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.
-
Medium 5.7
NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.
-
Medium 6.1
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80…
-
Medium 4.5
Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.12…
-
Medium 6.7
NETGEAR R8000 devices before 1.0.4.76 are affected by command injection by an authenticated user.
-
Medium 6.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.60,…
-
Medium 6.6
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,…
-
Medium 6.3
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58,…
-
Medium 6.1
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66,…
-
Medium 6.1
Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial n…
-
Medium 4.5
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects CBR750 bef…
-
Medium 6.0
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 befo…
-
Medium 4.5
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 befo…
-
Medium 6.8
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 be…
-
Medium 6.5
Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an …
-
Medium 5.4
NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker.
-
Medium 5.2
Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80…
-
Medium 4.6
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.7…
-
Medium 6.8
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.…
-
Medium 5.3
NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information.
-
Medium 6.5
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000…
-
Medium 6.9
NETGEAR R6400 devices before 1.0.1.70 are affected by server-side injection.
-
Medium 6.1
NETGEAR R7000 devices before 1.0.9.88 are affected by stored XSS.
-
Medium 6.1
NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS.
-
Medium 5.6
NETGEAR R7000 devices before 1.0.11.126 are affected by stored XSS.
-
Medium 6.5
Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.36, EAX80 before 1.0.1.62, EX3700 b…
-
Medium 6.5
Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX80 before 1.0.1.64, EX3700 b…
-
Medium 6.5
Certain NETGEAR devices are affected by stored XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.48, EAX80 be…
-
Medium 6.5
Certain NETGEAR devices are affected by stored XSS. This affects EAX20 before 1.0.0.48, EAX80 before 1.0.1.64, EX3700 b…