2021

NETGEAR R7000 devices before 1.0.9.88 are affected by stored XSS.

NETGEAR R6400 devices before 1.0.1.70 are affected by server-side injection.

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects EAX80 before 1.0.1.62, EX7000

NETGEAR R7000 devices before 1.0.11.116 are affected by disclosure of sensitive information.

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects AC2100 before 1.2.0.8

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.72

Certain NETGEAR devices are affected by reflected XSS. This affects CBR40 before 2.5.0.10, EAX20 before 1.0.0.32, EAX80

NETGEAR D7000 devices before 1.0.1.82 are affected by a stack-based buffer overflow by an unauthenticated attacker.

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an u

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400v2 bef

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6400 befor

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects CBR750 befo

Certain NETGEAR devices are affected by disclosure of sensitive information. A UPnP request reveals a device's serial nu

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.66,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.58,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.76,

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.60,

NETGEAR R8000 devices before 1.0.4.76 are affected by command injection by an authenticated user.

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R7000 before 1.0.11.126

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects EX7000 before 1.0.1.80,

NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.

NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.

NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.

NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.

NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.

Certain NETGEAR devices are affected by denial of service. This affects R6400 before 1.0.1.70, R7000 before 1.0.11.126,

Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, R

Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass.

NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass.

MediaTek microchips, as used in NETGEAR devices through 2021-12-13 and other devices, mishandle attempts at Wi-Fi authen

archivy is vulnerable to Cross-Site Request Forgery (CSRF)

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::Frame::page, a different vulnerability than CVE-2021-3

In WebKitGTK before 2.32.4, there is a use-after-free in WebCore::ContainerNode::firstChild, a different vulnerability t

In WebKitGTK before 2.32.4, there is incorrect memory allocation in WebCore::ImageBufferCairoImageSurfaceBackend::create

An issue was discovered in the Linux kernel before 5.15.11. There is a memory leak in the __rds_conn_create() function i

invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

elgg is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Path traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlie

Open redirect vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier

In MediaWiki through 1.37, the Special:ImportFile URI (aka FileImporter) allows XSS, as demonstrated by the clientUrl pa

In MediaWiki through 1.37, Wikibase item descriptions allow XSS, which is triggered upon a visit to an action=info URL (

In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that

In MediaWiki through 1.37, blocked IP addresses are allowed to edit EntitySchema items.

An issue was discovered in UTI Mutual fund Android application 5.4.18 and prior, allows attackers to brute force enumera

A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive)

A flaw was found in podman. The `podman machine` function (used to create and manage Podman virtual machine containing a

An XSS vulnerability was found in Privoxy which was fixed in cgi_error_no_template() by encode the template name when Pr

The HTTP PUT and DELETE methods were enabled in the Web Help Desk web server (12.7.7 and earlier), allowing users to exe