Researchers
Back
Aircut
Researcher from
Bugcrowd
#230
of 60,463
726.7
Total CVSS
Vulnerabilities
·
110
Medium
92
High
14
Critical
4
PT-2021-6218
2021-12-21
7.5
CVE-2021-45670
NetGear
Ex6120
The issue is caused by the lack of protection for the web page structure, allowing a remote attacker to impact the confidentiality, integrity, and availability of protected information. This is a stored XSS vulnerability.
PT-2021-5856
2021-12-21
6.5
CVE-2021-45671
NetGear
R7900
The issue is related to stored XSS, which can allow a remote attacker to perform cross-site scripting attacks due to inadequate protection of the web page structure.
PT-2021-6235
2021-12-21
7.5
CVE-2021-45667
NetGear
Ex6120
The issue is caused by a lack of protection for the web page structure, allowing a remote attacker to impact the confidentiality, integrity, and availability of protected information. This is a stored XSS issue.
PT-2021-5913
2021-09-25
7.8
CVE-2021-45656
NetGear
Netgear R7450
The issue is related to incorrect management of code generation, which can allow an attacker to perform a server-side injection attack. This type of attack can be executed through vulnerable API endpoints, although specific endpoint details are not provided. The vulnerability is associated with the `Server Side Include Injection (SSI)` attack type.
PT-2021-5960
2021-09-25
7.8
CVE-2021-45657
NetGear
Rbs40
The issue is related to incorrect management of code generation, which can lead to a server-side injection attack. This type of attack allows an attacker to inject malicious code into a server, potentially leading to unauthorized access or data manipulation. The estimated number of potentially affected devices worldwide is not specified.
PT-2021-5846
2021-09-25
9.6
CVE-2021-45626
NetGear
Netgear Rbr50
The issue is related to command injection by an unauthenticated attacker due to a lack of input data sanitization in the embedded software of NETGEAR Wi-Fi routers. This allows a remote attacker to execute arbitrary commands.
PT-2021-5905
2021-09-25
9.8
CVE-2021-45658
NetGear
Ex6420
The issue is related to server-side injection, which can be exploited due to insufficient cleaning of special elements in output used by an incoming component. This may allow an attacker to perform a server-side include injection attack.
PT-2020-17467
2020-12-29
6.1
CVE-2020-35827
NetGear
Xr500
Certain NETGEAR devices are affected by stored XSS.
PT-2020-17464
2020-12-29
6.1
CVE-2020-35824
NetGear
Netgear R7800
The issue is related to stored XSS, which affects certain NETGEAR devices.
PT-2020-17468
2020-12-29
6.1
CVE-2020-35828
NetGear
Xr500
The issue is related to stored XSS, affecting various NETGEAR devices.
PT-2020-17461
2020-12-29
6.1
CVE-2020-35821
NetGear
Rbr40
The issue is related to stored XSS, affecting certain NETGEAR devices.
PT-2020-17463
2020-12-29
6.1
CVE-2020-35823
NetGear
Xr500
Certain NETGEAR devices are affected by stored XSS.
PT-2020-17465
2020-12-29
6.1
CVE-2020-35825
NetGear
Xr500
Certain NETGEAR devices are affected by stored XSS.
PT-2020-17466
2020-12-29
6.1
CVE-2020-35826
NetGear
Xr500
The issue is related to stored XSS, which affects certain NETGEAR devices.
PT-2020-17455
2020-12-29
6.1
CVE-2020-35815
NetGear
Xr500
The issue is related to stored XSS, affecting certain NETGEAR devices.
PT-2020-17454
2020-12-29
6.1
CVE-2020-35814
NetGear
Xr500
Certain NETGEAR devices are affected by stored XSS.
PT-2020-17456
2020-12-29
6.1
CVE-2020-35816
NetGear
Xr500
The issue is related to stored XSS, affecting certain NETGEAR devices.
PT-2020-17450
2020-12-29
6.1
CVE-2020-35810
NetGear
Xr500
Certain NETGEAR devices are affected by stored XSS.
PT-2020-17453
2020-12-29
6.1
CVE-2020-35813
NetGear
Xr500
Certain NETGEAR devices are affected by stored XSS.
PT-2020-17449
2020-12-29
6.1
CVE-2020-35809
NetGear
Xr500
The issue is related to stored XSS, affecting various NETGEAR devices.