Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-20613 State: PUBLISHED Published: 2020-03-24T19:28:57 Last Updated: 2024-08-05T02:46:10.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is time-based SQL injection in Contacts. The Samsung ID is SVE-2018-13452 (March 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20614 State: PUBLISHED Published: 2020-03-24T19:29:51 Last Updated: 2024-08-05T02:46:09.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Allshare allows attackers to access sensitive information. The Samsung ID is SVE-2018-13453 (March 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20615 State: PUBLISHED Published: 2020-03-24T19:30:41 Last Updated: 2024-08-05T02:46:10.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Attackers can bypass Factory Reset Protection (FRP) via SVoice T&C. The Samsung ID is SVE-2018-13547 (March 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20616 State: PUBLISHED Published: 2020-03-24T19:31:33 Last Updated: 2024-08-05T02:46:10.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks a thumbnail of Private Mode content. The Samsung ID is SVE-2018-13563 (March 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20617 State: PUBLISHED Published: 2020-03-24T19:32:29 Last Updated: 2024-08-05T02:46:10.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) software. Secure Folder leaks preview data of recent apps. The Samsung ID is SVE-2018-13764 (March 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20618 State: PUBLISHED Published: 2020-03-24T19:33:40 Last Updated: 2024-08-05T02:46:10.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-13765 (March 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20619 State: PUBLISHED Published: 2020-03-24T19:34:30 Last Updated: 2024-08-05T02:46:10.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) software. Secure Startup leaks keyboard suggested words. The Samsung ID is SVE-2019-13773 (March 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20620 State: PUBLISHED Published: 2020-03-24T19:36:20 Last Updated: 2024-08-05T02:46:10.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with P(9.0) software. The Settings application allows unauthenticated changes. The Samsung IDs are SVE-2019-13814, SVE-2019-13815 (March 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20621 State: PUBLISHED Published: 2020-03-24T19:37:42 Last Updated: 2024-08-05T02:46:10.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a baseband heap overflow. The Samsung ID is SVE-2018-13187 (February 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20622 State: PUBLISHED Published: 2020-03-24T19:38:39 Last Updated: 2024-08-05T02:46:10.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a baseband stack overflow. The Samsung ID is SVE-2018-13188 (February 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20623 State: PUBLISHED Published: 2020-03-24T19:39:53 Last Updated: 2024-08-05T02:46:10.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. Gallery has uninitialized memory disclosure. The Samsung ID is SVE-2018-13060 (February 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20624 State: PUBLISHED Published: 2020-03-24T19:40:59 Last Updated: 2024-08-05T02:46:10.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. S-Voice leaks keyboard learned words via the lock screen. The Samsung ID is SVE-2018-12981 (February 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20625 State: PUBLISHED Published: 2020-03-24T19:41:46 Last Updated: 2024-08-05T02:46:10.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets) software. The ion debugfs driver allows information disclosure. The Samsung ID is SVE-2018-13427 (February 2019). Additional Analyst Notes: - CVE Program Container: References: - https://security.samsungmobile.com/securityUpdate.smsb
CVE ID: CVE-2019-20626 State: PUBLISHED Published: 2020-03-23T16:12:53 Last Updated: 2024-08-05T02:46:10.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: The remote keyless system on Honda HR-V 2017 vehicles sends the same RF signal for each door-open request, which might allow a replay attack. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40victor_14768/replay-attacks-en-autos-206481dcfee1 - https://github.com/HackingIntoYourHeart/Unoriginal-Rice-Patty
CVE ID: CVE-2019-20627 State: PUBLISHED Published: 2020-03-23T16:55:03 Last Updated: 2024-08-05T02:46:10.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: AutoUpdater.cs in AutoUpdater.NET before 1.5.8 allows XXE. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ravibpatel/AutoUpdater.NET/commit/1dc25f2bea6ea522dbac1512b5563c4746d539c3 - https://github.com/ravibpatel/AutoUpdater.NET/releases/tag/v1.5.8 - https://www.doyler.net/security-not-included/autoupdater-net-vulnerability
CVE ID: CVE-2019-20628 State: PUBLISHED Published: 2020-03-24T18:15:11 Last Updated: 2024-08-05T02:46:10.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a Use-After-Free vulnerability in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1269 - https://github.com/gpac/gpac/commit/1ab4860609f2e7a35634930571e7d0531297e090 - https://github.com/gpac/gpac/commit/98b727637e32d1d4824101d8947e2dbd573d4fc8
CVE ID: CVE-2019-20629 State: PUBLISHED Published: 2020-03-24T18:15:04 Last Updated: 2024-08-05T02:46:10.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gf_m2ts_process_pmt in media_tools/mpegts.c that can cause a denial of service via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1264 - https://github.com/gpac/gpac/commit/2320eb73afba753b39b7147be91f7be7afc0eeb7
CVE ID: CVE-2019-20630 State: PUBLISHED Published: 2020-03-24T18:14:55 Last Updated: 2024-08-05T02:46:10.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit) in utils/bitstream.c that can cause a denial of service via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/commit/1ab4860609f2e7a35634930571e7d0531297e090 - https://github.com/gpac/gpac/issues/1268
CVE ID: CVE-2019-20631 State: PUBLISHED Published: 2020-03-24T18:14:47 Last Updated: 2024-08-05T02:46:10.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_list_count in utils/list.c that can cause a denial of service via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1270
CVE ID: CVE-2019-20632 State: PUBLISHED Published: 2020-03-24T18:14:37 Last Updated: 2024-08-05T02:46:10.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_odf_delete_descriptor in odf/desc_private.c that can cause a denial of service via a crafted MP4 file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gpac/gpac/issues/1271
CVE ID: CVE-2019-20633 State: PUBLISHED Published: 2020-03-25T16:44:49 Last Updated: 2024-08-05T02:46:10.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file. NOTE: this issue exists because of an incomplete fix for CVE-2018-6952. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.gnu.org/bugs/index.php?56683
CVE ID: CVE-2019-20634 State: PUBLISHED Published: 2020-03-30T20:50:59 Last Updated: 2024-10-28T16:15:23.594Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores from Proofpoint email headers, it is possible to build a copy-cat Machine Learning Classification model and extract insights from this model. The insights gathered allow an attacker to craft emails that receive preferable scores, with a goal of delivering malicious emails. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moohax/
delivering malicious emails. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/moohax/Proof-Pudding - https://github.com/moohax/Talks/blob/master/slides/DerbyCon19.pdf - https://www.proofpoint.com/us/security/CVE-2019-20634 - https://www.proofpoint.com/us/security/security-advisories/pfpt-sn-2020-0001
CVE ID: CVE-2019-20635 State: PUBLISHED Published: 2020-04-02T15:04:48 Last Updated: 2024-08-05T02:46:10.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: codeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code and access the Java class loader via computed fields. Additional Analyst Notes: - CVE Program Container: References: - https://codebeamer.com/cb/wiki/7372223
CVE ID: CVE-2019-20636 State: PUBLISHED Published: 2020-04-08T13:58:43 Last Updated: 2024-08-05T02:46:10.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_keycode, aka CID-cb222aed03d7. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cb222aed03d798fc074be55e59d9a112338ee784 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.12 - https://github.com/torvalds/linux/commit/cb222aed03d798fc074be55e59d9a112338ee784 - https://security.netapp.co
-5.4.12 - https://github.com/torvalds/linux/commit/cb222aed03d798fc074be55e59d9a112338ee784 - https://security.netapp.com/advisory/ntap-20200430-0004/ - https://lists.debian.org/debian-lts-announce/2020/06/msg00011.html - https://lists.debian.org/debian-lts-announce/2020/06/msg00013.html
CVE ID: CVE-2019-20637 State: PUBLISHED Published: 2020-04-08T23:01:30 Last Updated: 2024-08-05T02:46:10.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. It does not clear a pointer between the handling of one client request and the next request within the same connection. This sometimes causes information to be disclosed from the connection workspace, such as data structures associated with previous requests within this connection or VCL-related temporary headers. Additional Analyst Notes: - CVE Program Container: References: - http://varnish-cache.org/security/VSV
emporary headers. Additional Analyst Notes: - CVE Program Container: References: - http://varnish-cache.org/security/VSV00004.html#vsv00004 - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00031.html - http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00026.html
CVE ID: CVE-2019-20638 State: PUBLISHED Published: 2020-04-15T17:10:33 Last Updated: 2024-08-05T02:46:10.357Z Severity: HIGH (CVSS 7 CVSS:3.0/AC:L/AV:A/A:L/C:H/I:H/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061506/Security-Advisory-for-Admin-Credential-Disclosure-on-MR1100-PSV-2019-0008
CVE ID: CVE-2019-20639 State: PUBLISHED Published: 2020-04-15T17:11:38 Last Updated: 2024-08-05T02:46:10.312Z Severity: MEDIUM (CVSS 6 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50 before 2.3.5.30, and RBK50 before 2.3.5.30. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061505/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-WiFi-Systems-PSV-2018-0543
CVE ID: CVE-2019-20640 State: PUBLISHED Published: 2020-04-15T17:12:56 Last Updated: 2024-08-05T02:46:10.359Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.32, D7000 before 1.0.1.68, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.38, R6050 before 1.0.1.18, R6080 before 1.0.0.38, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6260 before 1.1.0.40, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2
0.0.46, R6220 before 1.1.0.80, R6260 before 1.1.0.40, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900v2 before 1.2.0.36, WNR2020 before 1.1.0.62, and XR500 before 2.3.2.32. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061504/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-Routers-and-Gateways-PSV-2018-0304
CVE ID: CVE-2019-20641 State: PUBLISHED Published: 2020-04-15T17:14:27 Last Updated: 2024-08-05T02:46:10.436Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061501/Security-Advisory-for-Missing-Function-Level-Access-Control-on-RAX40-PSV-2019-0285
CVE ID: CVE-2019-20642 State: PUBLISHED Published: 2020-04-15T17:15:43 Last Updated: 2024-08-05T02:46:10.340Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AC:L/AV:A/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061500/Security-Advisory-for-Authentication-Bypass-on-RAX40-PSV-2019-0266
CVE ID: CVE-2019-20643 State: PUBLISHED Published: 2020-04-15T17:16:35 Last Updated: 2024-08-05T02:46:10.443Z Severity: HIGH (CVSS 7.7 CVSS:3.0/AC:H/AV:N/A:H/C:H/I:L/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061499/Security-Advisory-for-Sensitive-Information-Disclosure-on-RAX40-PSV-2019-0247
CVE ID: CVE-2019-20644 State: PUBLISHED Published: 2020-04-15T17:17:27 Last Updated: 2024-08-05T02:46:10.296Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AC:L/AV:L/A:N/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061498/Security-Advisory-for-Stored-Cross-Site-Scripting-on-RAX40-PSV-2019-0246
CVE ID: CVE-2019-20645 State: PUBLISHED Published: 2020-04-15T17:18:27 Last Updated: 2024-08-05T02:46:10.331Z Severity: MEDIUM (CVSS 4.2 CVSS:3.0/AC:L/AV:L/A:N/C:L/I:L/PR:H/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061497/Security-Advisory-for-Stored-Cross-Site-Scripting-on-RAX40-PSV-2019-0243
CVE ID: CVE-2019-20646 State: PUBLISHED Published: 2020-04-15T17:25:03 Last Updated: 2024-08-05T02:46:10.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061496/Security-Advisory-for-Admin-Credential-Disclosure-on-RAX40-PSV-2019-0237
CVE ID: CVE-2019-20647 State: PUBLISHED Published: 2020-04-15T17:26:02 Last Updated: 2024-08-05T02:46:10.416Z Severity: MEDIUM (CVSS 6.8 CVSS:3.0/AC:L/AV:A/A:H/C:N/I:N/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061495/Security-Advisory-for-Denial-of-Service-on-RAX40-PSV-2019-0210
CVE ID: CVE-2019-20648 State: PUBLISHED Published: 2020-04-15T17:26:55 Last Updated: 2024-08-05T02:46:10.316Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AC:L/AV:A/A:N/C:L/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061494/Security-Advisory-for-Security-Misconfiguration-on-RN42400-PSV-2019-0205
CVE ID: CVE-2019-20649 State: PUBLISHED Published: 2020-04-15T17:27:51 Last Updated: 2024-08-05T02:46:10.442Z Severity: MEDIUM (CVSS 6.9 CVSS:3.0/AC:H/AV:N/A:N/C:H/I:L/PR:N/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061493/Security-Advisory-for-Sensitive-Information-Disclosure-on-MR1100-PSV-2019-0204
CVE ID: CVE-2019-20650 State: PUBLISHED Published: 2020-04-15T17:29:05 Last Updated: 2024-08-05T02:46:10.445Z Severity: MEDIUM (CVSS 5.3 CVSS:3.0/AC:H/AV:A/A:H/C:N/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by denial of service. This affects R8900 before 1.0.5.2, R9000 before 1.0.5.2, XR500 before 2.3.2.56, and XR700 before 1.0.1.20. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061492/Security-Advisory-for-Denial-of-Service-on-Some-Routers-PSV-2019-0197
CVE ID: CVE-2019-20651 State: PUBLISHED Published: 2020-04-15T18:37:31 Last Updated: 2024-08-05T02:46:10.433Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AC:L/AV:L/A:L/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 8.2.1.16 and WAC510 before 8.2.1.16. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061491/Security-Advisory-for-Post-Authentication-Command-Injection-on-WAC505-and-WAC510-PSV-2019-0176
CVE ID: CVE-2019-20652 State: PUBLISHED Published: 2020-04-15T18:38:58 Last Updated: 2024-08-05T02:46:10.367Z Severity: HIGH (CVSS 7.9 CVSS:3.0/AC:L/AV:L/A:N/C:H/I:L/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR WAC505 devices before 8.2.1.16 are affected by disclosure of sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061489/Security-Advisory-for-Sensitive-Information-Disclosure-on-WAC505-PSV-2019-0086
CVE ID: CVE-2019-20653 State: PUBLISHED Published: 2020-04-15T18:39:54 Last Updated: 2024-08-05T02:46:10.325Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by denial of service. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061488/Security-Advisory-for-Denial-of-Service-on-WAC505-and-WAC510-PSV-2019-0083
CVE ID: CVE-2019-20654 State: PUBLISHED Published: 2020-04-15T18:40:40 Last Updated: 2024-08-05T02:46:10.327Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AC:L/AV:A/A:N/C:L/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC505 before 8.0.6.4 and WAC510 before 8.0.6.4. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061487/Security-Advisory-for-Security-Misconfiguration-on-WAC505-and-WAC510-PSV-2019-0061
CVE ID: CVE-2019-20655 State: PUBLISHED Published: 2020-04-15T18:41:38 Last Updated: 2024-08-05T02:46:10.317Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AC:L/AV:L/A:L/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR500 before 2.3.2.56 and XR700 before 1.0.1.20. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000061484/Security-Advisory-for-Post-Authentication-Command-Injection-on-XR500-and-XR700-PSV-2019-0026