Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-35749 State: PUBLISHED Published: 2021-01-15T16:51:10 Last Updated: 2024-08-04T17:09:15.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjb_file parameter to wp-admin/post.php. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/document/d/1TbePkrRGsczepBaJptIdVRvfRrjiC5hjGg_Vxdesw6E/edit?usp=sharing - http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.html - http://packetstormsecurity.c
http://packetstormsecurity.com/files/161050/Simple-JobBoard-Authenticated-File-Read.html - http://packetstormsecurity.com/files/165892/WordPress-Simple-Job-Board-2.9.3-Local-File-Inclusion.html
CVE ID: CVE-2020-35752 State: PUBLISHED Published: 2021-03-10T14:15:25 Last Updated: 2024-08-04T17:09:15.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.sourcecodester.com/download-code?nid=14622&title=Baby+Care+System+in+PHP%2FMySQLi+with+Full+Source+Code+ - https://www.sourcecodester.com/php/14622/baby-care-system-phpmysqli-full-source-code.html - https://www.exploit-db.com/exploits/49358
CVE ID: CVE-2020-35753 State: PUBLISHED Published: 2021-01-22T03:40:35 Last Updated: 2024-08-04T17:09:15.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19.0.00 through 19.0.20), when the "Recommend job posting" function is enabled, allows XSS via the SENDER parameter. Additional Analyst Notes: - CVE Program Container: References: - https://it-sec.de/ger/Aktuelles-Termine/it.sec-blog/it.sec-Research-Team-findet-unbekannte-Schwachstelle-in-Persis-Online-Bewerberportal - https://slashcrypto.org/2021/02/20/CVE-2020-35753/
CVE ID: CVE-2020-35754 State: PUBLISHED Published: 2021-01-28T19:26:27 Last Updated: 2024-08-04T17:09:15.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Language tab. Additional Analyst Notes: - CVE Program Container: References: - https://opensolution.org/cms-system-quick-cms.html - https://opensolution.org/security-fix-for-cart-and-cms%21-en-1136.html - https://secator.pl/index.php/2021/01/28/cve-2020-35754-authenticated-rce-in-quick-cms-and-quick-cart/ - http://packetstormsecurity.com/files/161189/Quick
/01/28/cve-2020-35754-authenticated-rce-in-quick-cms-and-quick-cart/ - http://packetstormsecurity.com/files/161189/Quick.CMS-6.7-Remote-Code-Execution.html
CVE ID: CVE-2020-35755 State: PUBLISHED Published: 2021-05-03T20:46:18 Last Updated: 2024-08-04T17:09:15.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service Read_ NVRAM Direct Access Information Leak. The luci_service deamon running on port 7777 provides a sub-category of commands for which Read_ is prepended. Commands in this category are able to directly read the contents of the device configuration NVRAM. The NVRAM contains sensitive information, such as the Wi-Fi password (in cleartext), as well as connected account tokens for services such as Spotify. Additional Analyst Notes: - CVE Pr
ord (in cleartext), as well as connected account tokens for services such as Spotify. Additional Analyst Notes: - CVE Program Container: References: - https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/
CVE ID: CVE-2020-35756 State: PUBLISHED Published: 2021-05-03T20:47:01 Last Updated: 2024-08-04T17:09:15.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service GETPASS Configuration Password Information Leak. The luci_service daemon running on port 7777 does not require authentication to return the device configuration password in cleartext when using the GETPASS command. As such, any unauthenticated person with access to port 7777 on the device will be able to leak the user's personal device configuration password by issuing the GETPASS command. Additional Analyst Notes: - CVE Program Contain
s personal device configuration password by issuing the GETPASS command. Additional Analyst Notes: - CVE Program Container: References: - https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/
CVE ID: CVE-2020-35757 State: PUBLISHED Published: 2021-05-03T20:47:52 Last Updated: 2024-08-04T17:09:15.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is Unauthenticated Root ADB Access Over TCP. The LS9 web interface provides functionality to access ADB over TCP. This is not enabled by default, but can be enabled by sending a crafted request to a web management interface endpoint. Requests made to this endpoint do not require authentication. As such, any unauthenticated user who is able to access the web interface will be able to gain root privileges on the LS9 module. Additional Analyst Notes: - CVE
ble to access the web interface will be able to gain root privileges on the LS9 module. Additional Analyst Notes: - CVE Program Container: References: - https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/
CVE ID: CVE-2020-35758 State: PUBLISHED Published: 2021-05-03T20:48:39 Last Updated: 2024-08-04T17:09:15.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a Authentication Bypass in the Web Interface. This interface does not properly restrict access to internal functionality. Despite presenting a password login page on first access, authentication is not required to access privileged functionality. As such, it's possible to directly access APIs that should not be exposed to an unauthenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://www.iot-inspector.com/blog/adviso
ticated user. Additional Analyst Notes: - CVE Program Container: References: - https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/
CVE ID: CVE-2020-35759 State: PUBLISHED Published: 2021-06-16T15:52:45 Last Updated: 2024-08-04T17:09:15.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content (Locally/Remotely). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alexlang24/bloofoxCMS/issues/10
CVE ID: CVE-2020-35760 State: PUBLISHED Published: 2021-06-16T15:52:34 Last Updated: 2024-08-04T17:09:15.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php files). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alexlang24/bloofoxCMS/issues/9
CVE ID: CVE-2020-35761 State: PUBLISHED Published: 2021-06-16T15:52:18 Last Updated: 2024-08-04T17:09:15.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alexlang24/bloofoxCMS/issues/8
CVE ID: CVE-2020-35762 State: PUBLISHED Published: 2021-06-16T15:52:11 Last Updated: 2024-08-04T17:09:15.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alexlang24/bloofoxCMS/issues/11
CVE ID: CVE-2020-35765 State: PUBLISHED Published: 2021-02-05T08:55:35 Last Updated: 2024-08-04T17:09:15.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do. Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com - https://www.tenable.com/security/research/tra-2021-02 - https://www.tenable.com/security/research/tra-2021-02 - https://www.manageengine.com/products/applications_manager/issues.html#v15000 - https://www.manageengine.com/products/appli
ps://www.manageengine.com/products/applications_manager/issues.html#v15000 - https://www.manageengine.com/products/applications_manager/security-updates/security-updates-cve-2020-35765.html
CVE ID: CVE-2020-35766 State: PUBLISHED Published: 2020-12-28T19:21:20 Last Updated: 2024-08-04T17:09:15.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/trusteddomainproject/OpenDKIM/issues/113
CVE ID: CVE-2020-35769 State: PUBLISHED Published: 2020-12-29T05:35:39 Last Updated: 2024-08-04T17:09:15.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: miniserv.pl in Webmin 1.962 on Windows mishandles special characters in query arguments to the CGI program. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/webmin/webmin/commit/1163f3a7f418f249af64890f4636575e687e9de7#diff-9b33fd8f5603d4f0d1428689bc36f24af4770608a22c0d92b7a8bcc522450dc6 - https://vigilance.fr/vulnerability/Webmin-code-execution-via-miniserv-pl-handle-request-34220
CVE ID: CVE-2020-35773 State: PUBLISHED Published: 2020-12-29T17:46:23 Last Updated: 2024-08-04T17:09:15.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: The site-offline plugin before 1.4.4 for WordPress lacks certain wp_create_nonce and wp_verify_nonce calls, aka CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/2445009/ - https://developer.wordpress.org/reference/functions/wp_create_nonce/ - https://developer.wordpress.org/reference/functions/wp_verify_nonce/ - https://wordpress.org/plugins/site-offline/#developers - https://advisory.checkmarx.net/advisory/CX-2020-4292
CVE ID: CVE-2020-35774 State: PUBLISHED Published: 2020-12-29T17:54:04 Last Updated: 2024-08-04T17:09:15.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: server/handler/HistogramQueryHandler.scala in Twitter TwitterServer (aka twitter-server) before 20.12.0, in some configurations, allows XSS via the /histograms endpoint. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/twitter/twitter-server/commit/e0aeb87e89a6e6c711214ee2de0dd9f6e5f9cb6c - https://github.com/twitter/twitter-server/compare/twitter-server-20.10.0...twitter-server-20.12.0 - https://advisory.checkmarx.net/advisory/CX-2020-4287
CVE ID: CVE-2020-35775 State: PUBLISHED Published: 2021-02-15T14:52:30 Last Updated: 2024-08-04T17:09:15.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: CITSmart before 9.1.2.23 allows LDAP Injection. Additional Analyst Notes: - CVE Program Container: References: - https://citsmart.com.br/solucoes/itsm-2/ - https://github.com/nardnet/citsmart/blob/master/WEB-INF/src/br/com/centralit/citcorpore/integracao/ad/LDAPUtils.java - https://rdstation-static.s3.amazonaws.com/cms/files/86153/1597862259Ebook-Whatsnew-CITSmart.pdf - https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html - http://packetstormsecurity.com/files/162181/CITSmart-ITSM-
rt-platform-9/get-started/about-citsmart/release-notes.html - http://packetstormsecurity.com/files/162181/CITSmart-ITSM-9.1.2.22-LDAP-Injection.html
CVE ID: CVE-2020-35776 State: PUBLISHED Published: 2021-02-18T19:57:57 Last Updated: 2024-08-04T17:09:15.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP 181 responses. Additional Analyst Notes: - CVE Program Container: References: - https://issues.asterisk.org/ - http://seclists.org/fulldisclosure/2021/Feb/57 - https://downloads.asterisk.org/pub/security/AST-2021-001.html - https://issues.asterisk.org/jira/browse/ASTERISK-29227 - http://packetstormsecurity.com/files/161470/Asterisk-Project-Security-A
issues.asterisk.org/jira/browse/ASTERISK-29227 - http://packetstormsecurity.com/files/161470/Asterisk-Project-Security-Advisory-AST-2021-001.html
CVE ID: CVE-2020-35777 State: PUBLISHED Published: 2020-12-29T23:41:58 Last Updated: 2024-08-04T17:09:15.224Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR DGN2200v1 devices before v1.0.0.58 are affected by command injection. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062634/Security-Advisory-for-Command-Injection-Vulnerability-on-DGN2200v1-PSV-2020-0411
CVE ID: CVE-2020-35778 State: PUBLISHED Published: 2020-12-29T23:41:45 Last Updated: 2024-08-04T17:09:15.223Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AC:L/AV:N/A:N/C:N/I:L/PR:N/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by CSRF. This affects GS716Tv3 before 6.3.1.36 and GS724Tv4 before 6.3.1.36. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062721/Security-Advisory-for-Cross-Site-Request-Forgery-on-Some-Smart-Managed-Pro-Switches-PSV-2020-0368
CVE ID: CVE-2020-35779 State: PUBLISHED Published: 2020-12-29T23:41:37 Last Updated: 2024-08-04T17:09:15.248Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:H/AV:N/A:H/C:L/I:N/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062722/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0500
CVE ID: CVE-2020-35780 State: PUBLISHED Published: 2020-12-29T23:41:28 Last Updated: 2024-08-04T17:09:15.182Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AC:L/AV:N/A:H/C:N/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062723/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0537
CVE ID: CVE-2020-35781 State: PUBLISHED Published: 2020-12-29T23:41:19 Last Updated: 2024-08-04T17:09:15.248Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR NMS300 devices before 1.6.0.27 are affected by denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062687/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0561
CVE ID: CVE-2020-35782 State: PUBLISHED Published: 2020-12-29T23:41:12 Last Updated: 2024-08-04T17:09:15.186Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:H/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. The TFTP firmware update mechanism does not properly implement firmware validations, allowing remote attackers to write arbitrary data to internal memory. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062636
ta to internal memory. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062636/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0378 - https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
CVE ID: CVE-2020-35783 State: PUBLISHED Published: 2020-12-29T23:41:04 Last Updated: 2024-08-04T17:09:15.185Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:N/PR:N/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, GS116Ev2 before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and JGS524PE before 2.6.0.48. The NSDP protocol version allows unauthenticated remote attackers to obtain all the switch configuration parameters by sending the corresponding read requests. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/00
corresponding read requests. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062637/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0383 - https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
CVE ID: CVE-2020-35784 State: PUBLISHED Published: 2020-12-29T23:40:55 Last Updated: 2024-08-04T17:09:15.217Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AC:H/AV:N/A:L/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by lack of access control at the function level. This affects JGS516PE before 2.6.0.48, JGS524PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, and GS116Ev2 before 2.6.0.48. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062638/Security-Advisory-for-Missing-Function-Level-Access-Control-on-Some-Smart-Managed-Plus-Switches-PSV-2020-0396
CVE ID: CVE-2020-35785 State: PUBLISHED Published: 2020-12-29T23:40:44 Last Updated: 2024-08-04T17:09:15.190Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AC:H/AV:A/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR DGN2200v1 devices before v1.0.0.60 mishandle HTTPd authentication (aka PSV-2020-0363, PSV-2020-0364, and PSV-2020-0365). Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062646/Security-Advisory-for-Multiple-HTTPd-Authentication-Vulnerabilities-on-DGN2200v1
CVE ID: CVE-2020-35786 State: PUBLISHED Published: 2020-12-29T23:40:31 Last Updated: 2024-08-04T17:09:15.240Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AC:L/AV:A/A:H/C:N/I:N/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR R7800 devices before 1.0.2.74 are affected by a buffer overflow by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062718/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-R7800-PSV-2020-0218
CVE ID: CVE-2020-35787 State: PUBLISHED Published: 2020-12-29T23:40:23 Last Updated: 2024-08-04T17:09:15.193Z Severity: HIGH (CVSS 8 CVSS:3.1/AC:L/AV:A/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D3600 before 1.0.0.76, D6000 before 1.0.0.76, D6200 before 1.1.00.36, D7000 before 1.0.1.70, EX6200v2 before 1.0.1.78, EX7000 before 1.0.1.78, EX8000 before 1.0.1.186, JR6150 before 1.0.1.18, PR2000 before 1.0.0.28, R6020 before 1.0.0.42, R6050 before 1.0.1.18, R6080 before 1.0.0.42, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6260 before 1.1.0.64, R6300v2 bef
before 1.0.1.18, R6080 before 1.0.0.42, R6120 before 1.0.0.46, R6220 before 1.1.0.80, R6260 before 1.1.0.64, R6300v2 before 1.0.4.34, R6700 before 1.0.2.6, R6700v2 before 1.2.0.36, R6800 before 1.2.0.36, R6900 before 1.0.2.4, R6900P before 1.3.1.64, R6900v2 before 1.2.0.36, R7000 before 1.0.9.42, R7000P before 1.3.1.64, R7800 before 1.0.2.60, R8900 before 1.0.4.12, R9000 before 1.0.4.12, and XR500 before 2.3.2.40. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062710/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-and-Range-Extenders-PSV-2018-0379
CVE ID: CVE-2020-35788 State: PUBLISHED Published: 2020-12-29T23:40:13 Last Updated: 2024-08-04T17:09:15.200Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AC:H/AV:A/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR WAC104 devices before 1.0.4.13 are affected by a buffer overflow by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062719/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-WAC104-PSV-2020-0319
CVE ID: CVE-2020-35789 State: PUBLISHED Published: 2020-12-29T23:40:03 Last Updated: 2024-08-04T17:09:15.195Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR NMS300 devices before 1.6.0.27 are affected by command injection by an authenticated user. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062686/Security-Advisory-for-Post-Authentication-Command-Injection-on-NMS300-PSV-2020-0559
CVE ID: CVE-2020-35790 State: PUBLISHED Published: 2020-12-29T23:39:54 Last Updated: 2024-08-04T17:09:15.221Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.56, R7800 before 1.0.2.68, R8900 before 1.0.4.26, and R9000 before 1.0.4.26. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062639/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2018-0571
CVE ID: CVE-2020-35791 State: PUBLISHED Published: 2020-12-29T23:39:44 Last Updated: 2024-08-04T17:09:15.199Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7800 before 1.0.2.68, R8900 before 1.0.5.2, and R9000 before 1.0.5.2. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062714/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0079
CVE ID: CVE-2020-35792 State: PUBLISHED Published: 2020-12-29T23:39:33 Last Updated: 2024-08-04T17:09:15.180Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AC:L/AV:A/A:L/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R7500v2 before 1.0.3.48, R8900 before 1.0.5.2, R9000 before 1.0.5.2, and R7800 before 1.0.2.68. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062682/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2019-0157