NETGEAR vulnerabilities
219 CVEs and advisories name NETGEAR as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-38096NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability
- CVE-2023-38095NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability
- CVE-2023-35722NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
- CVE-2023-35721NETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution Vulnerability
- CVE-2023-34285NETGEAR RAX30 cmsCli_authenticate Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-34284NETGEAR RAX30 Use of Hard-coded Credentials Authentication Bypass Vulnerability
- CVE-2023-34283NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability
- CVE-2023-27370NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability
- CVE-2023-27369NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
- CVE-2023-27368NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
- CVE-2023-27367NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability
- CVE-2023-27361NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-27360NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability
- CVE-2023-27358NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability
- CVE-2023-27357NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability
- CVE-2023-27356NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability
- CVE-2024-4235Netgear DG834Gv5 Web Management Interface cleartext storage
- CVE-2023-48725A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7
- CVE-2024-1431Netgear R7000 Web Management Interface debuginfo.htm information disclosure
- CVE-2024-1430Netgear R7000 Web Management Interface currentsetting.htm information disclosure
- CVE-2023-49694NETGEAR ProSAFE Network Management System Privilege Escalation Via MySQL Server
- CVE-2023-49693NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire Protocol
- CVE-2023-2396Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-2395Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-2394Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-2393Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-2392Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-2391Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-2390Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-2389Netgear SRX5308 Web Management Interface cross site scripting