|
255511
|
2.5 |
LOW
Local
|
chownr_project
|
chownr
|
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via symlink attacks.
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2017-18869
|
2024-11-21 12:21 |
2020-06-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255512
|
7.7 |
HIGH
Network
|
digi
|
xbee_2_firmware
|
Digi XBee 2 devices do not have an effective protection mechanism against remote AT commands, because of issues related to the network stack upon which the ZigBee protocol is built.
|
CWE-276
Incorrect Default Permissions
|
CVE-2017-18868
|
2024-11-21 12:21 |
2020-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255513
|
6.8 |
MEDIUM
Physics
|
netgear
|
d6100_firmware d7800_firmware r7100lg_firmware wndr4300_firmware wndr4500_firmware
|
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D6100 before 1.0.0.55, D7800 before V1.0.1.24, R7100LG before V1.0.0.32, WNDR4300v1 before 1.0.2.90,…
|
CWE-20
Improper Input Validation
|
CVE-2017-18867
|
2024-11-21 12:21 |
2020-05-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255514
|
6.1 |
MEDIUM
Network
|
netgear
|
6r7500_firmware r6100_firmware r7500_firmware r7800_firmware r9000_firmware wndr4300_firmware wnr2000_firmware
|
Certain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100 before 1.0.1.1, 6R7500 before 1.0.0.110, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, WNDR4300v2 befor…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18866
|
2024-11-21 12:21 |
2020-05-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255515
|
6.8 |
MEDIUM
Adjacent
|
netgear
|
r8500_firmware r8300_firmware
|
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8300 before 1.0.2.104 and R8500 before 1.0.2.104.
|
CWE-787
Out-of-bounds Write
|
CVE-2017-18865
|
2024-11-21 12:21 |
2020-05-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255516
|
8.8 |
HIGH
Adjacent
|
netgear
|
r6400_firmware r6700_firmware r6900_firmware r6900p_firmware r7000_firmware r7000p_firmware r7100lg_firmware r7300_firmware r7900_firmware r8300_firmware r8500_firmware
|
Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7…
|
CWE-120
Classic Buffer Overflow
|
CVE-2017-18864
|
2024-11-21 12:21 |
2020-05-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255517
|
6.7 |
MEDIUM
Local
|
netgear
|
readynas_os_firmware
|
NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection.
|
CWE-74
Injection
|
CVE-2017-18856
|
2024-11-21 12:21 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255518
|
8.8 |
HIGH
Adjacent
|
netgear
|
wnr854t_firmware
|
NETGEAR WNR854T devices before 1.5.2 are affected by command execution.
|
CWE-74
Injection
|
CVE-2017-18855
|
2024-11-21 12:21 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255519
|
6.7 |
MEDIUM
Local
|
netgear
|
readynas_os_firmware
|
NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection.
|
CWE-74
Injection
|
CVE-2017-18854
|
2024-11-21 12:21 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255520
|
7.7 |
HIGH
Local
|
netgear
|
fs752tp_firmware gs108t_firmware gs110tp_firmware gs418tpp_firmware gs510tlp_firmware gs510tp_firmware gs510tpp_firmware gs716t_firmware gs724t_firmware gs728tpsb_firmware<…
|
Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earli…
|
CWE-74
Injection
|
CVE-2017-18860
|
2024-11-21 12:21 |
2020-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|