CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
Nighthawk_x10-r9000_firmware, Nighthawk_x10-r9000, Cg3700b_firmware, Cg3700b, Wndr3400v3_firmware, Wndr3400v3, Mr1100_firmware, Mr1100, Srx5308_firmware, Srx5308
2022-03-31
N/A
8.8 HIGH
NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to admin_account.cgi.
Nighthawk_x10-r9000_firmware, Nighthawk_x10-r9000, Cg3700b_firmware, Cg3700b, Wndr3400v3_firmware, Wndr3400v3, Mr1100_firmware, Mr1100, Srx5308_firmware, Srx5308
2022-03-31
N/A
8.8 HIGH
NETGEAR R8500 1.0.2.158 devices allow remote authenticated users to execute arbitrary commands (such as telnetd) via shell metacharacters in the sysNewPasswd and sysConfirmPasswd parameters to password.cgi.
Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow an exportXFAData NULL pointer dereference.
libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
tcpprep in Tcpreplay 4.4.1 has a heap-based buffer over-read in parse_mpls in common/get.c.
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_l2len_protocol in common/get.c.
tcprewrite in Tcpreplay 4.4.1 has a heap-based buffer over-read in get_ipv6_next in common/get.c.
2022-12-13
N/A
7.5 HIGH
Certain HP PageWide Pro Printers may be vulnerable to a potential denial of service attack.
tcprewrite in Tcpreplay 4.4.1 has a reachable assertion in get_layer4_v6 in common/get.c.
stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw.