Vulnerability index

Browse CVEs

4,971 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness InjectionCWE-74 × clear
D3600 Firmware HIGH 8.8
CVE-2017-18762

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D3600 before 1.0.0.68, D6000 before 1.0.0.68, …

Fix: 1.0.0.40 / 1.0.0.57+
Fix from $1,950 2020-04-22
D6100 Firmware HIGH 8.8
CVE-2017-18764

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.55, D7000 before 1.0.1.50, …

Fix: 1.0.0.18 / 1.0.0.55+
Fix from $1,950 2020-04-22
D7800 Firmware MEDIUM 6.8
CVE-2017-18767

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6400 …

Fix: 1.0.0.32 / 1.0.0.56+
Fix from $1,600 2020-04-22
Wac505 Firmware MEDIUM 6.8
CVE-2018-21119

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.5.4 and WAC510 before 5.0.5.4.

Fix: 5.0.5.4+
Fix from $1,600 2020-04-22
D6200 Firmware HIGH 7.8
CVE-2017-18786

Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JW…

Fix: 1.0.0.20 / 1.0.1.12+
Fix from $1,950 2020-04-22
D6200 Firmware HIGH 7.8
CVE-2017-18787

Certain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24, JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.12, JW…

Fix: 1.0.0.20 / 1.0.1.12+
Fix from $1,950 2020-04-22
D7800 Firmware MEDIUM 6.8
CVE-2018-21112

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, R7500v2 before 1.0.3.38, R780…

Fix: 1.0.1.44 / 1.0.2.52+
Fix from $1,600 2020-04-22
D6100 Firmware HIGH 8.8
CVE-2018-21113

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.42, …

Fix: 1.0.0.58 / 1.0.0.130+
Fix from $1,950 2020-04-22
D7800 Firmware MEDIUM 6.8
CVE-2018-21114

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.44, EX6150v2 before 1.0.1.70, EX6…

Fix: 1.0.0.110 / 1.0.1.16+
Fix from $1,600 2020-04-22
D6100 Firmware MEDIUM 6.7
CVE-2017-18773

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before V1.0.0.55, D7800 before V1.0.1.24, EX61…

Fix: 1.0.0.48 / 1.0.0.55+
Fix from $1,600 2020-04-22
D3600 Firmware MEDIUM 6.7
CVE-2017-18788

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 …

Fix: 1.0.0.32 / 1.0.0.44+
Fix from $1,600 2020-04-22
D7800 Firmware MEDIUM 6.8
CVE-2018-21146

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7800 before 1.0.2.42, R8900 …

Fix: 1.0.0.54 / 1.0.1.34+
Fix from $1,600 2020-04-21
R7800 Firmware MEDIUM 6.7
CVE-2017-18793

NETGEAR R7800 devices before 1.0.2.36 are affected by command injection.

Fix: 1.0.2.36+
Fix from $1,600 2020-04-21
R6300 Firmware HIGH 8.4
CVE-2017-18794

Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.0.1.24, R6700 before 1.0.1.26,…

Fix: 1.0.0.32 / 1.0.1.18+
Fix from $1,950 2020-04-21
D6220 Firmware MEDIUM 6.7
CVE-2017-18795

Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and D6100 before 1.0.0.50_0.0.50.

Fix: 1.0.0.28 / 1.0.0.50_0.0.50+
Fix from $1,600 2020-04-21
R6400 Firmware MEDIUM 6.7
CVE-2017-18796

Certain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24, R6700 before 1.0.1.26, R6900 before 1.0.1.28, R7000 be…

Fix: 1.0.1.16 / 1.0.1.24+
Fix from $1,600 2020-04-21
R6220 Firmware MEDIUM 6.7
CVE-2017-18801

Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR37…

Fix: 1.0.1.50 / 1.1.0.38+
Fix from $1,600 2020-04-21
D6100 Firmware HIGH 8.4
CVE-2017-18792

NETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection.

Fix: 1.0.0.50_0.0.50+
Fix from $1,950 2020-04-21
R6100 Firmware MEDIUM 6.7
CVE-2017-18802

Certain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14, R7500 before 1.0.0.110, R7500v2 before 1.0.3.16, R7800…

Fix: 1.0.0.110 / 1.0.1.14+
Fix from $1,600 2020-04-21
R7800 Firmware MEDIUM 6.7
CVE-2017-18804

Certain NETGEAR devices are affected by command injection. This affects R7800 before 1.0.2.16 and R9000 before 1.0.2.4.

Fix: 1.0.2.4 / 1.0.2.16+
Fix from $1,600 2020-04-21
Wac510 Firmware MEDIUM 6.7
CVE-2017-18805

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 be…

Fix: 1.3.0.10 / 2.1.2+
Fix from $1,600 2020-04-21
Wac510 Firmware MEDIUM 6.7
CVE-2017-18806

Certain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10, WAC120 before 2.1.4, WNDAP620 before 2.1.3, WND930 be…

Fix: 1.3.0.10 / 2.1.2+
Fix from $1,600 2020-04-21
R6220 Firmware MEDIUM 6.7
CVE-2017-18841

Certain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.46, R6700v2 before 1.1.0.38, R6800 before 1.1.0.38, WNDR37…

Fix: 1.0.1.50 / 1.1.0.38+
Fix from $1,600 2020-04-20
D6220 Firmware HIGH 7.8
CVE-2017-18849

Certain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 be…

Fix: 1.0.0.26 / 1.0.0.56+
Fix from $1,950 2020-04-20
D8500 Firmware MEDIUM 6.7
CVE-2017-18851

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D8500 through 1.0.3.28, R6400 through 1.0.1.22, R640…

Fix: 1.0.1.12 / 1.0.1.22+
Fix from $1,600 2020-04-20
Clearpass HIGH 7.2
CVE-2020-7111

A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Re…

Fix: 6.7.13 / 6.8.4+
Fix from $1,950 2020-04-16
Qdpm MEDIUM 5.4
CVE-2020-11814

A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites.

No fix yet
Fix from $1,600 2020-04-16
Cpp Httplib HIGH 7.5
CVE-2020-11709

cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for C…

Fix: after 0.5.8
Fix from $1,950 2020-04-12
Provide Ftp Server HIGH 7.5
CVE-2020-11703

An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language p…

Fix: after 13.1
Fix from $1,950 2020-04-12
Dropwizard Validation HIGH 8.8
CVE-2020-11002EPSS 5%

dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template injection was identified in …

Fix: 1.3.21 / 2.0.3+
Fix from $1,950 2020-04-10