Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-35184 State: PUBLISHED Published: 2020-12-17T01:25:03 Last Updated: 2024-08-04T17:02:06.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35184
CVE ID: CVE-2020-35185 State: PUBLISHED Published: 2020-12-17T00:39:47 Last Updated: 2024-08-04T17:02:06.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35185
CVE ID: CVE-2020-35186 State: PUBLISHED Published: 2020-12-17T01:13:27 Last Updated: 2024-08-04T17:02:06.713Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35186
CVE ID: CVE-2020-35187 State: PUBLISHED Published: 2020-12-17T00:58:19 Last Updated: 2024-08-04T17:02:06.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. System using the telegraf docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35187
CVE ID: CVE-2020-35188 State: REJECTED Published: 2020-12-17T01:17:58 Last Updated: 2021-01-04T17:03:54 Description: No description available.
CVE ID: CVE-2020-35189 State: PUBLISHED Published: 2020-12-17T00:44:39 Last Updated: 2024-08-04T17:02:07.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35189
CVE ID: CVE-2020-35190 State: PUBLISHED Published: 2020-12-17T01:30:19 Last Updated: 2024-08-04T17:02:06.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user. System using the plone docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35190
CVE ID: CVE-2020-35191 State: PUBLISHED Published: 2020-12-17T01:08:36 Last Updated: 2024-08-04T17:02:06.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user. System using the drupal docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35191
CVE ID: CVE-2020-35192 State: PUBLISHED Published: 2020-12-17T01:33:02 Last Updated: 2024-08-04T17:02:06.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35192
CVE ID: CVE-2020-35193 State: PUBLISHED Published: 2020-12-15T23:14:51 Last Updated: 2024-08-04T17:02:06.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35193
CVE ID: CVE-2020-35194 State: REJECTED Published: 2020-12-17T01:35:41 Last Updated: 2021-01-04T17:29:51 Description: No description available.
CVE ID: CVE-2020-35195 State: PUBLISHED Published: 2020-12-17T01:11:26 Last Updated: 2024-08-04T17:02:06.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official haproxy docker images before 1.8.18-alpine (Alpine specific) contain a blank password for a root user. System using the haproxy docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35195
CVE ID: CVE-2020-35196 State: PUBLISHED Published: 2020-12-17T01:20:33 Last Updated: 2024-08-04T17:02:07.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific) contain a blank password for a root user. System using the rabbitmq docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35196
CVE ID: CVE-2020-35197 State: PUBLISHED Published: 2020-12-17T01:03:15 Last Updated: 2024-08-04T17:02:06.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank password for a root user. System using the memcached docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-35197
CVE ID: CVE-2020-35198 State: PUBLISHED Published: 2021-05-12T10:55:47 Last Updated: 2024-08-04T17:02:06.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://support2.windriver.com/index.php?page=security-notices - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-35198 - https://www.oracle.com/s
ecurity-notices - https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-35198 - https://www.oracle.com/security-alerts/cpuapr2022.html
CVE ID: CVE-2020-35199 State: PUBLISHED Published: 2020-12-12T17:20:41 Last Updated: 2024-08-04T17:02:06.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49233
CVE ID: CVE-2020-35200 State: PUBLISHED Published: 2020-12-12T17:20:34 Last Updated: 2024-08-04T17:02:06.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ignite Realtime Openfire 4.6.0 has plugins/clientcontrol/spark-form.jsp Reflective XSS. Additional Analyst Notes: - CVE Program Container: References: - https://discourse.igniterealtime.org/t/openfire-4-6-0-has-reflective-xss-vulnerabilities/89296
CVE ID: CVE-2020-35201 State: PUBLISHED Published: 2020-12-12T17:20:19 Last Updated: 2024-08-04T17:02:06.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp users Stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49234
CVE ID: CVE-2020-35202 State: PUBLISHED Published: 2020-12-12T17:20:27 Last Updated: 2024-08-04T17:02:07.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ignite Realtime Openfire 4.6.0 has plugins/dbaccess/db-access.jsp sql Stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49235
CVE ID: CVE-2020-35203 State: PUBLISHED Published: 2021-01-11T02:48:16 Last Updated: 2024-11-19T15:07:40.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the initFile.jsp file via the msg parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications - https://clandestinelabs.i
/un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications - https://clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications
CVE ID: CVE-2020-35204 State: PUBLISHED Published: 2021-01-11T02:53:14 Last Updated: 2024-08-04T17:02:07.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the PolicyAuthority/Common/FolderControl.jsp file via the unqID parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications - https://clandestinela
ps://un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications - https://clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications
CVE ID: CVE-2020-35205 State: PUBLISHED Published: 2021-01-11T02:52:14 Last Updated: 2024-08-04T17:02:07.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications - https://clandestinelabs.io/security-advisories/advisory-multiple-vul
quest-policy-authority-for-unified-communications - https://clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications
CVE ID: CVE-2020-35206 State: PUBLISHED Published: 2021-01-11T02:51:30 Last Updated: 2024-08-04T17:02:07.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the cConn.jsp file via the ur parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer Additional Analyst Notes: - CVE Program Container: References: - https://un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications - https://clandestinelabs.io/security-advisories/advisor
rabilities-in-quest-policy-authority-for-unified-communications - https://clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications
CVE ID: CVE-2020-35207 State: PUBLISHED Published: 2020-12-12T18:07:51 Last Updated: 2024-08-04T17:02:07.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary PIN. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices Additional Analyst Notes: - CVE Program Container: References: -
their threat model, which excludes jailbroken devices Additional Analyst Notes: - CVE Program Container: References: - https://github.com/evilblazer/LastPassVulnerabilities - https://youtu.be/C5j7drIylsQ
CVE ID: CVE-2020-35208 State: PUBLISHED Published: 2020-12-12T18:07:35 Last Updated: 2024-11-15T15:32:47.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate with an arbitrary password. NOTE: the vendor has indicated that this is not an attack of interest within the context of their threat model, which excludes jailbroken devices Additional Analyst Notes: - CVE Program Container: - CI
context of their threat model, which excludes jailbroken devices Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/evilblazer/LastPassVulnerabilities - https://youtu.be/63PfHVSr8iw
CVE ID: CVE-2020-35209 State: PUBLISHED Published: 2021-12-16T19:08:21 Last Updated: 2024-08-04T17:02:06.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to join a target cluster via providing configuration information. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/presentation/d/1W5KU7ffh4dheR8iD54ulABImi6byAhSI-OhEKw2adRo/edit?usp=sharing
CVE ID: CVE-2020-35210 State: PUBLISHED Published: 2021-12-16T19:08:22 Last Updated: 2024-08-04T17:02:06.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via a Raft session flooding attack using Raft OpenSessionRequest messages. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/presentation/d/1eZznIciFI06_5UJrXvlLugH2-nmjfYpQO5NyNMc9RxU/edit?usp=sharing
CVE ID: CVE-2020-35211 State: PUBLISHED Published: 2021-12-16T19:08:23 Last Updated: 2024-08-04T17:02:07.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Atomix v3.1.5 allows unauthorized Atomix nodes to become the lead node in a target cluster via manipulation of the variable terms in RaftContext. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/presentation/d/1C_IpRfSU-9FMezcHCFZ-qg-15JO-W36yvqcnzI8sQs8/edit?usp=sharing
CVE ID: CVE-2020-35213 State: PUBLISHED Published: 2021-12-16T19:08:24 Last Updated: 2024-08-04T17:02:06.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false link event messages sent to a master ONOS node. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/presentation/d/1i8tVVGE8z9Rtl9UTwktOJpkZwT4kBVLgIk307qMiw_8/edit?usp=sharing
CVE ID: CVE-2020-35214 State: PUBLISHED Published: 2021-12-16T19:08:25 Last Updated: 2024-08-04T17:02:07.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Atomix v3.1.5 allows a malicious Atomix node to remove states of ONOS storage via abuse of primitive operations. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/presentation/d/1wJi4QJko5ZCdADuzmAG9ed-nQLyJVkLBJf6cylAL71A/edit?usp=sharing
CVE ID: CVE-2020-35215 State: PUBLISHED Published: 2021-12-16T19:08:26 Last Updated: 2024-08-04T17:02:07.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Atomix v3.1.5 allows attackers to access sensitive information when a malicious Atomix node queries distributed variable primitives which contain the entire primitive lists that ONOS nodes use to share important states. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/presentation/d/1pRRLfdSUqUZ688CZ9e9AyceuXPGp9oyGj7j4bdSsBcw/edit?usp=sharing
CVE ID: CVE-2020-35216 State: PUBLISHED Published: 2021-12-16T19:08:26 Last Updated: 2024-08-04T17:02:07.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Atomix v3.1.5 allows attackers to cause a denial of service (DoS) via false member down event messages. Additional Analyst Notes: - CVE Program Container: References: - https://docs.google.com/presentation/d/1woXwR3vciv7ltFan6LyK5vsWXmaUi8ArZonhk80Gr5U/edit?usp=sharing
CVE ID: CVE-2020-35217 State: PUBLISHED Published: 2021-01-20T12:28:44 Last Updated: 2024-08-04T17:02:06.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vert.x-Web framework v4.0 milestone 1-4 does not perform a correct CSRF verification. Instead of comparing the CSRF token in the request with the CSRF token in the cookie, it compares the CSRF token in the cookie against a CSRF token that is stored in the session. An attacker does not even need to provide a CSRF token in the request because the framework does not consider it. The cookies are automatically sent by the browser and the verification will always succeed, leading to a successful CSRF attack. Additional Analyst Note
nt by the browser and the verification will always succeed, leading to a successful CSRF attack. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/vert-x3/vertx-web/pull/1613
CVE ID: CVE-2020-35219 State: PUBLISHED Published: 2021-01-04T17:50:42 Last Updated: 2024-08-04T17:02:07.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ASUS DSL-N17U modem with firmware 1.1.0.2 allows attackers to access the admin interface by changing the admin password without authentication via a POST request to Advanced_System_Content.asp with the uiViewTools_username=admin&uiViewTools_Password= and uiViewTools_PasswordConfirm= substrings. Additional Analyst Notes: - CVE Program Container: References: - https://www.asus.com/Networking-IoT-Servers/Modem-LTE-Routers/All-series/DSL-N16/HelpDesk_BIOS/ - https://securityforeveryone.com/blog/asus-dsl-n17u-model-cve-2020-35
dem-LTE-Routers/All-series/DSL-N16/HelpDesk_BIOS/ - https://securityforeveryone.com/blog/asus-dsl-n17u-model-cve-2020-35219
CVE ID: CVE-2020-35220 State: REJECTED Published: 2021-03-10T17:46:39 Last Updated: 2021-03-16T19:14:04 Description: No description available.
CVE ID: CVE-2020-35221 State: PUBLISHED Published: 2021-03-10T17:48:11 Last Updated: 2024-08-04T17:02:07.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: The hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was found to be insecure, allowing attackers (with access to a network capture) to quickly generate multiple collisions to generate valid passwords, or infer some parts of the original. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
CVE ID: CVE-2020-35222 State: REJECTED Published: 2021-03-10T17:53:49 Last Updated: 2021-03-16T19:17:46 Description: No description available.
CVE ID: CVE-2020-35223 State: PUBLISHED Published: 2021-03-10T17:57:26 Last Updated: 2024-08-04T17:02:07.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSRF protection mechanism implemented in the web administration panel on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices could be bypassed by omitting the CSRF token parameter in HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
CVE ID: CVE-2020-35224 State: PUBLISHED Published: 2021-03-10T17:58:14 Last Updated: 2024-08-04T17:02:07.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the NSDP protocol authentication method on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allows remote unauthenticated attackers to force a device reboot. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
CVE ID: CVE-2020-35225 State: PUBLISHED Published: 2021-03-10T17:58:53 Last Updated: 2024-08-04T17:02:07.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NSDP protocol implementation on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices was not properly validating the length of string parameters sent in write requests, potentially allowing denial of service attacks. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
CVE ID: CVE-2020-35226 State: PUBLISHED Published: 2021-03-10T18:03:30 Last Updated: 2024-08-04T17:02:07.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices allow unauthenticated users to modify the switch DHCP configuration by sending the corresponding write request command. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/
CVE ID: CVE-2020-35227 State: PUBLISHED Published: 2021-03-10T18:05:54 Last Updated: 2024-08-04T17:02:07.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability in the access control section on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices (in the administration web panel) allows an attacker to inject IP addresses into the whitelist via the checkedList parameter to the delete command. Additional Analyst Notes: - CVE Program Container: References: - https://research.nccgroup.com/2021/03/08/technical-advisory-multiple-vulnerabilities-in-netgear-prosafe-plus-jgs516pe-gs116ev2-switches/