|
209991
|
7.5 |
HIGH
Network
|
broadcom
|
ca_api_developer_portal
|
CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Sharing flaw and access sensitive information.
|
NVD-CWE-noinfo
|
CVE-2020-11662
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209992
|
8.1 |
HIGH
Network
|
broadcom
|
ca_api_developer_portal
|
CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.
|
NVD-CWE-noinfo
|
CVE-2020-11661
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209993
|
9.8 |
CRITICAL
Network
|
z-cron
|
z-cron
|
Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This can also affect all users who are signed in on the system if a shell is placed in…
|
CWE-269
Improper Privilege Management
|
CVE-2020-11799
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209994
|
7.5 |
HIGH
Network
|
netgear
|
r8900_firmware r9000_firmware rax120_firmware xr700_firmware
|
NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key disclosure.
|
CWE-295
Improper Certificate Validation
|
CVE-2020-11792
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209995
|
6.1 |
MEDIUM
Network
|
netgear
|
jgs516pe_firmware
|
NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2020-11791
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209996
|
9.8 |
CRITICAL
Network
|
netgear
|
r7800_firmware
|
NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers.
|
NVD-CWE-noinfo
|
CVE-2020-11790
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209997
|
9.8 |
CRITICAL
Network
|
netgear
|
r6400_firmware r6700_firmware r6900_firmware r7900_firmware
|
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects R6400v2 before 1.0.4.84, R6700 before 1.0.2.8, R6700v3 before 1.0.4.84, R6900 before 1.0.2.8, an…
|
CWE-77
Command Injection
|
CVE-2020-11789
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209998
|
8.8 |
HIGH
Adjacent
|
netgear
|
d6200_firmware d7000_firmware pr2000_firmware r6050_firmware jr6150_firmware r6120_firmware r6220_firmware r6230_firmware r6260_firmware r6700_firmware r6800_firmware
|
Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.34, D7000 before 1.0.1.68, PR2000 before 1.0.0.28, R6050 before 1.0.1.18, JR6150 before 1.0.1.18, R6120…
|
NVD-CWE-noinfo
|
CVE-2020-11788
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209999
|
4.8 |
MEDIUM
Network
|
netgear
|
d7800_firmware r7500_firmware r7800_firmware r8900_firmware r9000_firmware rax120_firmware xr500_firmware xr700_firmware rbr20_firmware rbs20_firmware rbk20_firmware …
|
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0…
|
CWE-79
Cross-site Scripting
|
CVE-2020-11787
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210000
|
4.8 |
MEDIUM
Network
|
netgear
|
d7800_firmware r7500_firmware r7800_firmware r8900_firmware r9000_firmware rax120_firmware xr500_firmware xr700_firmware rbr50_firmware rbs50_firmware rbk50_firmware
|
Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0…
|
CWE-79
Cross-site Scripting
|
CVE-2020-11786
|
2024-11-21 13:58 |
2020-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|