CVE-2018-21105

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

Source: CVE-2018-21105

CVE-2018-21103

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

Source: CVE-2018-21103

CVE-2019-20788

libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value.

Source: CVE-2019-20788

CVE-2019-17101

Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions.

Source: CVE-2019-17101

CVE-2018-21104

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

Source: CVE-2018-21104

CVE-2018-21102

NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.

Source: CVE-2018-21102

CVE-2018-21101

NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.

Source: CVE-2018-21101

CVE-2020-12113

BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.

Source: CVE-2020-12113

CVE-2020-7132

A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard Administrator. * OA 4.95 (Linux and Windows).

Source: CVE-2020-7132

CVE-2020-12112

BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.

Source: CVE-2020-12112