Vulnerabilities > Netgear
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-21 | CVE-2024-6813 | SQL Injection vulnerability in Netgear Prosafe Network Management System 1.7.0.34 NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. | 8.8 |
| 2024-08-21 | CVE-2024-6814 | SQL Injection vulnerability in Netgear Prosafe Network Management System 1.7.0.34 NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. | 8.8 |
| 2024-02-11 | CVE-2024-1431 | Unspecified vulnerability in Netgear R7000 Firmware 1.0.11.13610.2.120 A vulnerability was found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. low complexity netgear | 6.5 |
| 2024-02-11 | CVE-2024-1430 | Unspecified vulnerability in Netgear R7000 Firmware 1.0.11.13610.2.120 A vulnerability has been found in Netgear R7000 1.0.11.136_10.2.120 and classified as problematic. low complexity netgear | 6.5 |
| 2023-12-15 | CVE-2023-50089 | Command Injection vulnerability in Netgear Wnr2000 Firmware 1.0.0.70 A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70. | 9.8 |
| 2023-12-08 | CVE-2023-49007 | Out-of-bounds Write vulnerability in Netgear Rbr750 Firmware In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd. | 9.8 |
| 2023-11-29 | CVE-2023-49693 | Missing Authentication for Critical Function vulnerability in Netgear Prosafe Network Management System NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code. | 9.8 |
| 2023-11-29 | CVE-2023-49694 | Unspecified vulnerability in Netgear Prosafe Network Management System A low-privileged OS user with access to a Windows host where NETGEAR ProSAFE Network Management System is installed can create arbitrary JSP files in a Tomcat web application directory. | 7.8 |
| 2023-09-01 | CVE-2023-36187 | Classic Buffer Overflow vulnerability in Netgear products Buffer Overflow vulnerability in NETGEAR R6400v2 before version 1.0.4.118, allows remote unauthenticated attackers to execute arbitrary code via crafted URL to httpd. | 9.8 |
| 2023-08-07 | CVE-2023-36499 | Classic Buffer Overflow vulnerability in Netgear Xr300 Firmware 1.0.3.78 Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi. | 8.8 |