Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2025-05-01 | CVE-2025-4147 | Classic Buffer Overflow vulnerability in Netgear Ex6200 Firmware 1.0.3.94 A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. | 9.8 |
| 2025-05-01 | CVE-2025-4143 | Open Redirect vulnerability in Cloudflare Workers-Oauth-Provider 0.0.5 The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirect_uri was on the allowed list of redirect URIs for the given client registration. Fixed in: https://github.com/cloudflare/workers-oauth-provider/pull/26 https://github.com/cloudflare/workers-oauth-provider/pull/26 Impact: Under certain circumstances (see below), if a victim had previously authorized with a server built on workers-oath-provider, and an attacker could later trick the victim into visiting a malicious web site, then attacker could potentially steal the victim's credentials to the same OAuth server and subsequently impersonate them. In order for the attack to be possible, the OAuth server's authorized callback must be designed to auto-approve authorizations that appear to come from an OAuth client that the victim has authorized previously. | 6.1 |
| 2025-05-01 | CVE-2025-4144 | Unspecified vulnerability in Cloudflare Workers-Oauth-Provider 0.0.5 PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp . | 9.8 |
| 2025-05-01 | CVE-2025-4145 | Classic Buffer Overflow vulnerability in Netgear Ex6200 Firmware 1.0.3.94 A vulnerability, which was classified as critical, has been found in Netgear EX6200 1.0.3.94. | 9.8 |
| 2025-04-30 | CVE-2025-4142 | Classic Buffer Overflow vulnerability in Netgear Ex6200 Firmware 1.0.3.94 A vulnerability has been found in Netgear EX6200 1.0.3.94 and classified as critical. | 9.8 |
| 2025-04-30 | CVE-2025-4140 | Classic Buffer Overflow vulnerability in Netgear Ex6120 Firmware 1.0.3.94 A vulnerability, which was classified as critical, has been found in Netgear EX6120 1.0.3.94. | 9.8 |
| 2025-04-30 | CVE-2025-4141 | Classic Buffer Overflow vulnerability in Netgear Ex6200 Firmware 1.0.3.94 A vulnerability, which was classified as critical, was found in Netgear EX6200 1.0.3.94. | 9.8 |
| 2025-04-30 | CVE-2025-24132 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple products The issue was addressed with improved memory handling. | 6.5 |
| 2025-04-30 | CVE-2025-30422 | Classic Buffer Overflow vulnerability in Apple products A buffer overflow was addressed with improved input validation. | 6.5 |
| 2025-04-30 | CVE-2025-4139 | A vulnerability classified as critical was found in Netgear EX6120 1.0.0.68. | 8.8 |