netgear Vulnerability Advisory Catalog

Total 1,319 security vulnerabilities recorded for netgear software and firmware.

← Back to All Vendors
Component: dgn1000ww_firmware

An issue in Netgear DGN1000WW v.1.1.00.45 allows a remote attacker to execute arbitrary code via the Diagnostics page...

📅 2024-08-23
CVSS 8.8 Dossier →
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attacker...

📅 2024-08-21
CVSS 8.8 Dossier →
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers ...

📅 2024-08-21
CVSS 8.8 Dossier →
Component: wnr614_firmware

An issue in the implementation of the WPS in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to gain access to the router's pin....

📅 2024-06-07
CVSS 8.2 Dossier →
Component: wnr614_firmware

Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 was discovered to store credentials in plaintext....

📅 2024-06-07
CVSS 8.8 Dossier →
Component: wnr614_firmware

An issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords that do not conform to defined security standards....

📅 2024-06-07
CVSS 8.1 Dossier →
Component: wnr614_firmware

Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 does not properly set the HTTPOnly flag for cookies. This allows attackers to possibly intercept and acc...

📅 2024-06-07
CVSS 4.8 Dossier →
Component: wnr614_firmware

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.54_1.0.1 allows attackers to bypass authentication and access the administrative interface via unspec...

📅 2024-06-07
CVSS 8.8 Dossier →
Component: wnr614_firmware

Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via...

📅 2024-06-06
CVSS 4.0 Dossier →
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote atta...

📅 2024-06-06
CVSS 8.8 Dossier →
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote...

📅 2024-05-23
CVSS 8.8 Dossier →
Component: prosafe_network_management_software_300

NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary ...

📅 2024-05-23
CVSS 8.8 Dossier →
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System Default Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to e...

📅 2024-05-23
CVSS 7.8 Dossier →
Component: cax30_firmware

NETGEAR CAX30S SSO Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary co...

📅 2024-05-07
CVSS 8.8 Dossier →
Component: xr1000_firmware

NETGEAR Multiple Routers httpd Missing Authentication for Critical Function Information Disclosure Vulnerability. This vulnerability allows network-ad...

📅 2024-05-07
CVSS 6.5 Dossier →
Component: dc112a_firmware

NETGEAR Multiple Routers httpd Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t...

📅 2024-05-07
CVSS 8.8 Dossier →
Component: d7800_firmware

NETGEAR R7800 net-cgi Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra...

📅 2024-05-07
CVSS 8.8 Dossier →
CVE-2023-50231 CRITICAL
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote atta...

📅 2024-05-03
CVSS 9.6 Dossier →
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows rem...

📅 2024-05-03
CVSS 8.8 Dossier →
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers...

📅 2024-05-03
CVSS 8.8 Dossier →
Component: cax30_firmware

NETGEAR CAX30 SSO Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arb...

📅 2024-05-03
CVSS 8.8 Dossier →
Component: rbr760_firmware

NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affect...

📅 2024-05-03
CVSS 8.8 Dossier →
Component: prosafe_network_management_system

NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers...

📅 2024-05-03
CVSS 8.8 Dossier →
Component: rax30_firmware

NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbit...

📅 2024-05-03
CVSS 8.8 Dossier →
Page 7 of 55 (1,319 Total Records)