Skip to content
OpenAdvisories

Archive

December 2021

Vulnerabilities first published in this month (UTC), newest first.

1,999 results · Feed

  • Unscored —

    Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability. The value of the FirstRecor…

  • Medium 6.3

    Cross-Site Request Forgery (CSRF) in star7th/showdoc

    showdoc is vulnerable to Cross-Site Request Forgery (CSRF)

  • Medium 5.4

    Cross-site Scripting (XSS) - Reflected in livehelperchat/livehelperchat

    livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  • Unscored —

    An issue was discovered in split_region in uc.c in Unicorn Engine before 2.0.0-rc5. It allows local attackers to escape…

  • High 7.6

    Certain NETGEAR devices are affected by disclosure of administrative credentials. This affects RAX35 before 1.0.4.102, …

  • High 8.4

    Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects RBK352 before 4.4.0…

  • Medium 6.5

    NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass.

  • Critical 9.1

    NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.

  • Critical 9.4

    NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass.

  • Medium 6.5

    NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass.

  • High 8.2

    Certain NETGEAR devices are affected by authentication bypass. This affects R6900P before 1.3.3.140, R7000P before 1.3.…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects R7000P before 1.3.3.140 and R8000 before 1.…

  • Critical 9.4

    Certain NETGEAR devices are affected by authentication bypass. This affects AC2400 before 1.1.0.84, AC2600 before 1.1.0…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects CBR750 before 4.6.3.6, RBK752 before 3.2.17…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, CBR750 before 4.6.3.…

  • Critical 9.6

    Certain NETGEAR devices are affected by authentication bypass. This affects CBR40 before 2.5.0.24, RBK752 before 3.2.17…

  • High 8.2

    NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass.

  • Medium 6.8
    CVE-2021-45511 Public exploit EPSS 19%

    Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 202…

  • High 8.6

    Certain NETGEAR devices are affected by weak cryptography. This affects D7000v2 before 1.0.0.62, D8500 before 1.0.3.50,…

  • Critical 9.6

    NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.

  • Critical 9.6

    NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.

  • Medium 6.5

    Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, …

  • Medium 6.9

    Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126,…

  • Medium 6.5

    NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.

  • Medium 6.5

    NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.

  • Medium 6.5

    NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.

  • Critical 9.6

    Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.…

  • High 7.4

    Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 before 4.4.0.…

  • Medium 6.1

    NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.

  • Medium 5.7

    NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.

  • High 7.6

    NETGEAR R8000 devices before 1.0.4.62 are affected by a buffer overflow by an authenticated user.

  • Medium 6.1

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80…

  • High 7.3

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX6000 before 1.0.0.38…

  • Critical 9.6

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.68,…

  • High 8.1

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6300v2 before 1.0.4.5…