GCVE - cpe:2.3:h:netgear:jnr1010:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:netgear:jnr1010:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Netgear (`99700297-c207-56f4-abd0-97ab0c8bf3ab`)
Product	Jnr1010 (`0b26cb43-8c58-5676-8e1d-d1274b999fe6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-11016`	not_vulnerable	2026-06-08 05:07:25.963606	Details available NETGEAR JNR1010 devices before 1.0.0.32 allow webproc?getpage= XSS. Published: 2019-10-16T00:25:37.000Z Updated: 2024-08-06T03:47:34.090Z Open on db.gcve.eu Reference links https://lists.openwall.net/full-disclosure/2016/01/11/1 https://github.com/cybersecurityworks/Disclosed/issues/12 https://packetstormsecurity.com/files/135194/Netgear-1.0.0.24-Cross-Site-Scripting.html http://007software.net/multiple-cross-site-scripting-in-netgear-router-version1-0-0-24/ https://khalil-shreateh.com/khalil.shtml/it-highlights/592-Netgear-1.0.0.24-Cross-Site-Request-Forgery--.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11015`	not_vulnerable	2026-06-08 05:07:25.963226	Details available NETGEAR JNR1010 devices before 1.0.0.32 allow cgi-bin/webproc CSRF via the :InternetGatewayDevice.X_TWSZ-COM_URL_Filter.BlackList.1.URL parameter. Published: 2019-10-16T00:25:58.000Z Updated: 2024-08-06T03:47:34.078Z Open on db.gcve.eu Reference links https://lists.openwall.net/full-disclosure/2016/01/11/4 https://github.com/cybersecurityworks/Disclosed/issues/13 https://packetstormsecurity.com/files/135215/Netgear-1.0.0.24-Cross-Site-Request-Forgery.html https://pmcg2k15.wordpress.com/2016/01/11/fd-cross-site-request-forgery-in-netgear-router-jnr1010-version-1-0-0-24/ https://cybersecurityworks.com/zerodays/cve-2016-11015-netgear.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-11014`	not_vulnerable	2026-06-08 05:07:25.962644	Details available NETGEAR JNR1010 devices before 1.0.0.32 have Incorrect Access Control because the ok value of the auth cookie is a special case. Published: 2019-10-16T00:26:23.000Z Updated: 2024-08-06T03:47:34.045Z Open on db.gcve.eu Reference links https://github.com/cybersecurityworks/Disclosed/issues/14 https://packetstormsecurity.com/files/135216/Netgear-1.0.0.24-Bypass-Improper-Session-Management.html https://lists.openwall.net/full-disclosure/2016/01/11/5 https://khalil-shreateh.com/khalil.shtml/it-highlights/593-Netgear-1.0.0.24-Bypass---Improper-Session-Management--.html https://cybersecurityworks.com/zerodays/cve-2016-11014-netgear.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.