Latest CVE Feed
-
7.8
HIGHCVE-2021-29096
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the conte... Read more
- EPSS Score: %0.20
- Published: Mar. 25, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-29095
Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service... Read more
Affected Products : arcgis_server- EPSS Score: %0.36
- Published: Mar. 25, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-29094
Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service accou... Read more
Affected Products : arcgis_server- EPSS Score: %0.64
- Published: Mar. 25, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-29093
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.... Read more
Affected Products : arcgis_server- EPSS Score: %0.39
- Published: Mar. 25, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-29092
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors.... Read more
Affected Products : photo_station- EPSS Score: %1.90
- Published: Jun. 01, 2021
- Modified: Nov. 21, 2024
-
7.7
HIGHCVE-2021-29091
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.... Read more
Affected Products : photo_station- EPSS Score: %0.15
- Published: Jun. 02, 2021
- Modified: Nov. 21, 2024
-
9.0
HIGHCVE-2021-29090
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors.... Read more
Affected Products : photo_station- EPSS Score: %1.40
- Published: Jun. 02, 2021
- Modified: Nov. 21, 2024
-
10.0
HIGHCVE-2021-29089
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors.... Read more
Affected Products : photo_station- EPSS Score: %1.02
- Published: Jun. 02, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-29082
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30 before 2.6.1.4, RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBK754 before 3.2.15.25, RBR750 before 3.2.1... Read more
Affected Products : rbs40v_firmware rbk752_firmware rbr750_firmware rbs750_firmware rbk852_firmware rbr850_firmware rbs850_firmware rbw30_firmware rbk753_firmware rbk753s_firmware +16 more products- EPSS Score: %0.09
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
8.4
HIGHCVE-2021-29081
Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.... Read more
Affected Products : rbk752_firmware rbr750_firmware rbs750_firmware rbk852_firmware rbr850_firmware rbs850_firmware rbw30_firmware rbk753_firmware rbk753s_firmware rbk853_firmware +14 more products- EPSS Score: %0.14
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
8.1
HIGHCVE-2021-29080
Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR854 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, R7000 b... Read more
Affected Products : r6900p_firmware r7000_firmware r7000p_firmware rbk852_firmware rbr850_firmware rbs850_firmware cbr40_firmware r7900_firmware r7900p_firmware r7960p_firmware +22 more products- EPSS Score: %0.09
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-29079
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.... Read more
Affected Products : rbk852_firmware rbr850_firmware rbs850_firmware rbk853_firmware rbk854_firmware rbk852 rbk853 rbr850 rbs850 rbk854- EPSS Score: %0.24
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-29078
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RB... Read more
Affected Products : rbk752_firmware rbr750_firmware rbs750_firmware rbk852_firmware rbr850_firmware rbs850_firmware rbk753_firmware rbk753s_firmware rbk853_firmware rbk752 +12 more products- EPSS Score: %0.24
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-29077
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 ... Read more
Affected Products : rbs40v_firmware rbk752_firmware rbr750_firmware rbs750_firmware rbk852_firmware rbr850_firmware rbs850_firmware rbw30_firmware rbk753_firmware rbk753s_firmware +16 more products- EPSS Score: %0.21
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-29076
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.... Read more
Affected Products : rbk852_firmware rbr850_firmware rbs850_firmware rbk853_firmware rbk854_firmware rbk852 rbk853 rbr850 rbs850 rbk854- EPSS Score: %0.70
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
8.4
HIGHCVE-2021-29075
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK852 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12,... Read more
Affected Products : rbk752_firmware rbr750_firmware rbs750_firmware rbk852_firmware rbr850_firmware rbs850_firmware rbw30_firmware rbk753_firmware rbk753s_firmware rbk853_firmware +14 more products- EPSS Score: %0.14
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
8.4
HIGHCVE-2021-29074
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12,... Read more
Affected Products : rbk752_firmware rbr750_firmware rbs750_firmware rbk852_firmware rbr850_firmware rbs850_firmware rbw30_firmware rbk753_firmware rbk753s_firmware rbk853_firmware +14 more products- EPSS Score: %0.14
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
8.4
HIGHCVE-2021-29073
Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8000P before 1.4.1.66, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, R7960P before 1.4.1.66, R7900P before 1.4.1.66, RAX15... Read more
Affected Products : mk62_firmware mr60_firmware ms60_firmware r7900p_firmware r7960p_firmware r8000p_firmware rax15_firmware rax20_firmware rax200_firmware rax45_firmware +16 more products- EPSS Score: %0.10
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
8.4
HIGHCVE-2021-29072
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12.... Read more
Affected Products : rbk852_firmware rbr850_firmware rbs850_firmware rbk853_firmware rbk854_firmware rbk852 rbk853 rbr850 rbs850 rbk854- EPSS Score: %0.46
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-29071
Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBR752 before 3.2.17.12, RBR753 b... Read more
Affected Products : rbr750_firmware rbs750_firmware rbk852_firmware rbr850_firmware rbs850_firmware rbk853_firmware rbk854_firmware rbr752_firmware rbr753_firmware rbr753s_firmware +12 more products- EPSS Score: %0.18
- Published: Mar. 23, 2021
- Modified: Nov. 21, 2024