2020

NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.

Certain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and R6900 before 1.0.1.34.

Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 bef

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6100 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 befor

Certain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66, EX3800 before 1.0.0.66, EX61

NETGEAR WNDR4500v3 devices before 1.0.0.48 are affected by denial of service.

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.2

Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.2

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R85

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R8300 before 1.0.2.106

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.20

GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior ma

A certain Postfix 2.10.1-7 package could allow an attacker to send an email from an arbitrary-looking sender via a homog

bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular

Fifthplay S.A.M.I before 2019.3_HP2 allows unauthenticated stored XSS via a POST request.

The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI logo).

The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function.

The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function.

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations

Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R

Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R

Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D3600 before 1.0.0.76 and D600

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the

In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to ch

In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over une

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in firmware versions p

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely

BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.

OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.6

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.6

Certain NETGEAR devices are affected by stored XSS. This affects R6400 before 1.0.1.14, R6700 before 1.0.1.22, R6900 bef

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8,

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.61

paypal-adaptive through 0.4.2 manipulation of JavaScript objects resulting in Prototype Pollution. The PayPal function c

IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user

A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. This flaw

The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also a