reevesrs24/CVE

reevesrs24/CVE

Releases0

Stars8

CVE Disclosures

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-14363 ↗	Jul 28, 2019Sunday, 28 July 2019, 18:15	—	10 HIGH
A stack-based buffer overflow in the upnpd binary running on NETGEAR WNDR3400v3 routers with firmware version 1.0.1.18_1.0.63 allows an attacker to remotely execute arbitrary code via a crafted UPnP SSDP packet.
CVE-2018-15874 ↗	Aug 25, 2018Saturday, 25 August 2018, 19:29	6.1 MEDIUM	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an attacker to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request.
CVE-2018-15875 ↗	Aug 25, 2018Saturday, 25 August 2018, 19:29	6.1 MEDIUM	4.3 MEDIUM
Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows attackers to inject JavaScript into the router's admin UPnP page via the description field in an AddPortMapping UPnP SOAP request.