Vulnerabilities > Netgear > R9000 Firmware > 1.0.4.8
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-12-30 | CVE-2020-35790 | Command Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. | 5.2 |
| 2020-12-30 | CVE-2020-35787 | Classic Buffer Overflow vulnerability in Netgear products Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. | 5.2 |
| 2020-10-09 | CVE-2020-26915 | Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. | 3.5 |
| 2020-10-09 | CVE-2020-26913 | Out-of-bounds Write vulnerability in Netgear products Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. | 5.2 |
| 2020-04-22 | CVE-2018-21114 | Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. | 5.2 |
| 2020-04-22 | CVE-2018-21113 | Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. | 5.8 |
| 2020-04-22 | CVE-2018-21112 | Injection vulnerability in Netgear products Certain NETGEAR devices are affected by command injection by an authenticated user. | 5.2 |
| 2020-04-16 | CVE-2019-20760 | Unspecified vulnerability in Netgear R9000 Firmware NETGEAR R9000 devices before 1.0.4.26 are affected by authentication bypass. low complexity netgear | 5.8 |
| 2020-04-16 | CVE-2019-20759 | Cross-site Scripting vulnerability in Netgear R9000 Firmware NETGEAR R9000 devices before 1.0.4.26 are affected by stored XSS. | 2.9 |
| 2020-04-16 | CVE-2019-20752 | Cross-site Scripting vulnerability in Netgear products Certain NETGEAR devices are affected by stored XSS. | 3.5 |