Skip to main content
CVE-2021-45608 Dec 26, 01:15 CRITICAL POC PATCH Act Now

Certain D-Link, Edimax, NETGEAR, TP-Link, Tenda, and Western Digital devices are affected by an integer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

RCE Integer Overflow D-Link TP-Link Netgear +4
NVD
CVSS 3.1
9.8
EPSS
2.5%
CVE-2021-45511 Dec 26, 01:15 CRITICAL POC PATCH THREAT Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear R6230 Firmware R6260 Firmware R6850 Firmware +14
NVD
CVSS 3.1
9.8
EPSS
17.6%
CVE-2021-4168 Dec 26, 14:15 HIGH POC PATCH This Week

showdoc is vulnerable to Cross-Site Request Forgery (CSRF). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CSRF Showdoc
NVD GitHub
CVSS 3.1
8.8
EPSS
0.6%
CVE-2021-45720 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the lru crate before 0.7.1 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Lru
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-45719 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Rusqlite Rusqlite Project
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-45718 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Rusqlite Rusqlite Project
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-45717 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Rusqlite Rusqlite Project
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-45716 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Rusqlite Rusqlite Project
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-45715 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Rusqlite Rusqlite Project
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-45714 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Rusqlite Rusqlite Project
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-45713 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the rusqlite crate 0.25.x before 0.25.4 and 0.26.x before 0.26.2 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Use After Free Memory Corruption Rusqlite Rusqlite Project
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2021-45712 Dec 26, 22:15 HIGH POC PATCH This Week

An issue was discovered in the rust-embed crate before 6.3.0 for Rust. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Rust Embed
NVD
CVSS 3.1
7.5
EPSS
1.6%
CVE-2021-44598 Dec 26, 15:15 MEDIUM POC This Month

Attendance Management System 1.0 is affected by a Cross Site Scripting (XSS) vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Attendance Management System
NVD GitHub
CVSS 3.1
6.1
EPSS
0.7%
CVE-2021-4169 Dec 26, 12:15 MEDIUM POC PATCH This Month

livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Live Helper Chat Livehelperchat
NVD GitHub
CVSS 3.1
6.1
EPSS
0.9%
CVE-2021-45678 Dec 26, 01:15 CRITICAL Act Now

NETGEAR RAX200 devices before 1.0.5.132 are affected by insecure code. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rax200 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.3%
CVE-2021-45658 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by server-side injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Code Injection Netgear Dm200 Firmware R8900 Firmware R9000 Firmware +29
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2021-45645 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netgear Srk60 Firmware Srr60 Firmware Srs60 Firmware +5
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2021-45644 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by incorrect configuration of security settings. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Netgear R6230 Firmware R6260 Firmware R6850 Firmware +13
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45638 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear D6400 Firmware R7000 Firmware +12
NVD
CVSS 3.1
9.8
EPSS
1.5%
CVE-2021-45637 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Buffer Overflow Memory Corruption Netgear R6260 Firmware Ac2400 Firmware +6
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-45630 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +5
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45627 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Cbr750 Firmware Rbr850 Firmware Rbs850 Firmware +1
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45625 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear Xr300 Firmware R7000P Firmware R6900P Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45624 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear R7000 Firmware Xr300 Firmware R7100Lg Firmware +8
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45623 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Command Injection Netgear R9000 Firmware R7800 Firmware Xr500 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45622 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +37
NVD
CVSS 3.1
9.8
EPSS
2.4%
CVE-2021-45621 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware Ex3700 Firmware R7000 Firmware +45
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45620 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +39
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45619 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +39
NVD
CVSS 3.1
9.8
EPSS
2.5%
CVE-2021-45618 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R8900 Firmware R9000 Firmware Rax120 Firmware +33
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45617 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear R7000 Firmware Rbr750 Firmware Rbr850 Firmware +30
NVD
CVSS 3.1
9.8
EPSS
2.1%
CVE-2021-45616 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +29
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45614 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +19
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45613 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +23
NVD
CVSS 3.1
9.8
EPSS
2.0%
CVE-2021-45612 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Cbr750 Firmware R7000 Firmware Rbr750 Firmware +36
NVD
CVSS 3.1
9.8
EPSS
2.5%
CVE-2021-45611 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear Xr300 Firmware Dc112A Firmware R6400 Firmware +6
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-45610 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear D6400 Firmware R7000 Firmware Xr300 Firmware +25
NVD
CVSS 3.1
9.8
EPSS
1.4%
CVE-2021-45609 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear R7000 Firmware Xr300 Firmware R6250 Firmware +7
NVD
CVSS 3.1
9.8
EPSS
1.2%
CVE-2021-45527 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Buffer Overflow Netgear D6400 Firmware R7000 Firmware Rbr750 Firmware +33
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45512 Dec 26, 01:15 CRITICAL Act Now

Certain NETGEAR devices are affected by weak cryptography. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Ex3700 Firmware R7000 Firmware Xr300 Firmware +18
NVD
CVSS 3.1
9.8
EPSS
0.5%
CVE-2021-45509 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear Rbr750 Firmware Rbr850 Firmware Rbs750 Firmware +4
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45508 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +4
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45507 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear Cbr750 Firmware Rbr750 Firmware Rbr850 Firmware +7
NVD
CVSS 3.1
9.8
EPSS
1.4%
CVE-2021-45504 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear Cbr750 Firmware Rbr850 Firmware Rbs850 Firmware +2
NVD
CVSS 3.1
9.8
EPSS
1.1%
CVE-2021-45501 Dec 26, 01:15 CRITICAL PATCH Act Now

Certain NETGEAR devices are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear R6230 Firmware R6260 Firmware R6850 Firmware +16
NVD
CVSS 3.1
9.8
EPSS
1.9%
CVE-2021-45498 Dec 26, 01:15 CRITICAL PATCH Act Now

NETGEAR R6700v2 devices before 1.2.0.88 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear R6700V2 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.6%
CVE-2021-45497 Dec 26, 01:15 CRITICAL PATCH Act Now

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear D7000 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.9%
CVE-2021-45496 Dec 26, 01:15 CRITICAL PATCH Act Now

NETGEAR D7000 devices before 1.0.1.82 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear D7000 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.7%
CVE-2021-45495 Dec 26, 01:15 CRITICAL PATCH Act Now

NETGEAR D7000 devices before 1.0.1.68 are affected by authentication bypass. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Netgear D7000 Firmware
NVD
CVSS 3.1
9.8
EPSS
1.6%
CVE-2021-45513 Dec 26, 01:15 CRITICAL Act Now

NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker. Rated critical severity (CVSS 9.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Xr1000 Firmware
NVD
CVSS 3.1
9.6
EPSS
0.8%
Page 1 of 5 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy