Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (29 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2021-45549 1 Netgear 54 Lax20, Lax20 Firmware, Mk62 and 51 more 2024-11-21 8.4 High
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects LAX20 before 1.1.6.28, MK62 before 1.1.6.122, MR60 before 1.1.6.122, MS60 before 1.1.6.122, R6400v2 before 1.0.4.118, R6700v3 before 1.0.4.118, R6900P before 1.3.3.140, R7000 before 1.0.11.116, R7000P before 1.3.3.140, R7850 before 1.0.5.68, R7900 before 1.0.4.38, R7900P before 1.4.2.84, R7960P before 1.4.2.84, R8000 before 1.0.4.68, R8000P before 1.4.2.84, RAX15 before 1.0.3.96, RAX20 before 1.0.3.96, RAX200 before 1.0.4.120, RAX35v2 before 1.0.3.96, RAX40v2 before 1.0.3.96, RAX43 before 1.0.3.96, RAX45 before 1.0.3.96, RAX50 before 1.0.3.96, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, RS400 before 1.5.1.80, and XR1000 before 1.0.0.58.
CVE-2021-45522 1 Netgear 2 Xr1000, Xr1000 Firmware 2024-11-21 6.1 Medium
NETGEAR XR1000 devices before 1.0.0.58 are affected by a hardcoded password.
CVE-2021-45519 1 Netgear 2 Xr1000, Xr1000 Firmware 2024-11-21 6.5 Medium
NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVE-2021-45518 1 Netgear 2 Xr1000, Xr1000 Firmware 2024-11-21 6.5 Medium
NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVE-2021-45517 1 Netgear 2 Xr1000, Xr1000 Firmware 2024-11-21 6.5 Medium
NETGEAR XR1000 devices before 1.0.0.58 are affected by denial of service.
CVE-2021-45514 1 Netgear 2 Xr1000, Xr1000 Firmware 2024-11-21 9.6 Critical
NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.
CVE-2021-45513 1 Netgear 2 Xr1000, Xr1000 Firmware 2024-11-21 9.6 Critical
NETGEAR XR1000 devices before 1.0.0.58 are affected by command injection by an unauthenticated attacker.
CVE-2021-45510 1 Netgear 2 Xr1000, Xr1000 Firmware 2024-11-21 8.2 High
NETGEAR XR1000 devices before 1.0.0.58 are affected by authentication bypass.
CVE-2021-34870 1 Netgear 1 Xr1000 2024-11-21 6.5 Medium
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR XR1000 1.0.0.52_1.0.38 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of SOAP messages. The issue results from a lack of authentication required for a privileged request. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-13325.