[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424398
> CVE-2024-52030 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at ru_wan_flow.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-52029 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at genie_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-52028 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at wiz_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-52026 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at bsw_pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware, Netgear Xr300 Firmware, Netgear R6400v2 Firmware
> CVE-2024-52025 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at geniepppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware, Netgear Xr300 Firmware, Netgear R6400v2 Firmware
> CVE-2024-52024 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at wizpppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware, Netgear Xr300 Firmware, Netgear R6400v2 Firmware
> CVE-2024-52023 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe2.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware, Netgear Xr300 Firmware, Netgear R6400v2 Firmware
> CVE-2024-52022 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 1.00%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlg_adv.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-52021 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 1.00%]
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at bsw_fix.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-52020 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 1.00%]
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at wiz_fix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-52019 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 1.63%]
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at genie_fix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-52018 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 1.64%]
Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at genie_dyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear Xr300 Firmware
> CVE-2024-52017 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.42%]
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear Xr300 Firmware
> CVE-2024-52016 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.41%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component wlg_adv.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS...
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-52015 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at bsw_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-52014 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at genie_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-52013 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at wiz_pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-51024 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 1.42%]
D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the HostName parameter in the SetWanSettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Dlink Dir 823g Firmware
> CVE-2024-51023 [HIGH 8.8]
[PUBLISHED: 2024-11-05] [EPSS 1.46%]
D-Link DIR_823G 1.0.2B05 was discovered to contain a command injection vulnerability via the Address parameter in the SetNetworkTomographySettings function. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Dlink Dir 823g Firmware
> CVE-2024-51022 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear Xr300 Firmware
> CVE-2024-51021 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 0.85%]
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a command injection vulnerability via the wan_gateway parameter at genie_fix2.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware, Netgear Xr300 Firmware, Netgear R6400v2 Firmware
> CVE-2024-51020 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISP_detail_edit.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-51019 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pppoe_localnetmask parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-51018 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the pptp_user_netmask parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-51017 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the l2tp_user_netmask parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-51016 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the addName%d parameter in usb_approve.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear Xr300 Firmware
> CVE-2024-51015 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.58%]
Netgear R7000P v1.3.3.154 was discovered to contain a command injection vulnerability via the device_name2 parameter at operation_mode.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-51014 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the ssid_an parameter in bridge_wireless_main.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear Xr300 Firmware
> CVE-2024-51013 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the RADIUSAddr%d_wla parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware
> CVE-2024-51012 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_pri_dns parameter at ipv6_fix.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-51011 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 was discovered to contain a stack overflow via the pppoe_localip parameter at pppoe.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R7000p Firmware, Netgear Xr300 Firmware, Netgear R6400v2 Firmware
> CVE-2024-51010 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 0.96%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component ap_mode.cgi via the apmode_gateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-51009 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 0.96%]
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the wan_gateway parameter at ether.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-51008 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 0.96%]
Netgear XR300 v1.0.3.78 was discovered to contain a command injection vulnerability in the system_name parameter at wiz_dyn.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear Xr300 Firmware
> CVE-2024-51007 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear XR300 v1.0.3.78 was discovered to contain a stack overflow via the passphrase parameter at wireless.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear Xr300 Firmware
> CVE-2024-51006 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the ipv6_static_ip parameter in the ipv6_tunnel function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-51005 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 0.82%]
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the share_name parameter at usb_remote_smb_conf.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-51004 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160 and R7000P v1.3.3.154 were discovered to multiple stack overflow vulnerabilities in the component usb_device.cgi via the cifs_user, read_access, and write_access parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware
> CVE-2024-51003 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to multiple stack overflow vulnerabilities in the component ap_mode.cgi via the apmode_dns1_pri and apmode_dns1_sec parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS...
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-51002 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the l2tp_user_ip parameter at l2tp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-51001 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the sysDNSHost parameter at ddns.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-51000 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component wireless.cgi via the opmode, opmode_an, and opmode_an_2 parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-50999 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.74%]
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at password.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-50998 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component openvpn.cgi via the openvpn_service_port and openvpn_service_port_tun parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-50997 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.40%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the pptp_user_ip parameter at pptp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-50996 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.40%]
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a stack overflow via the bpa_server parameter at genie_bpa.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware, Netgear R7000p Firmware, Netgear Xr300 Firmware ... (+1)
> CVE-2024-50995 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160 was discovered to contain a stack overflow via the share_name parameter at usb_remote_smb_conf.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-50994 [MEDIUM 5.7]
[PUBLISHED: 2024-11-05] [EPSS 0.31%]
Netgear R8500 v1.0.2.160 was discovered to contain multiple stack overflow vulnerabilities in the component ipv6_fix.cgi via the ipv6_wan_ipaddr, ipv6_lan_ipaddr, ipv6_wan_length, and ipv6_lan_length parameters. These vulnerabilities allow attackers to cause a Denial of Service (DoS) via a crafted P...
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-50993 [HIGH 8.0]
[PUBLISHED: 2024-11-05] [EPSS 0.96%]
Netgear R8500 v1.0.2.160 was discovered to contain a command injection vulnerability in the sysNewPasswd parameter at admin_account.cgi. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request.
AFFECTED_PRODUCTS: Netgear R8500 Firmware
> CVE-2024-10845 [HIGH 7.3]
[PUBLISHED: 2024-11-05] [EPSS 0.93%]
A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file book_detail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disc...
AFFECTED_PRODUCTS: Bookstore Management System Project Bookstore Management System