By year
18
19
20
21
23
24
25
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2025-50617 A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046ed68 function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50616 A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046f984 function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50615 A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00470c50 function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50614 A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50613 A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00475e1c function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50612 A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_004743f8 function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50611 A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50610 A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50609 A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50608 A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00471994 function of the cgitest.cgi file.High 7.5 · Aug 13, 2025
- CVE-2025-50635 A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445.High 7.5 · Aug 13, 2025
- CVE-2025-45835 A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207.High 7.5 · May 12, 2025
- CVE-2024-33792 netis-systems MEX605 v2.00.06 allows attackers to execute arbitrary OS commands via a crafted payload to the tracert page.Critical 9.8 · May 3, 2024
- CVE-2024-25851 Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the config_sequence parameter in other_para of cgitest.cgi.High 8 · Feb 22, 2024
- CVE-2024-25850 Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameterCritical 9.8 · Feb 22, 2024
- CVE-2024-22729 NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection vulnerability via the password parameter on the login page.Critical 9.8 · Jan 25, 2024
- CVE-2023-45468 Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the pingWdogIp.High 7.5 · Oct 13, 2023
- CVE-2023-45467 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ntpServIP parameter in the Time Settings.Critical 9.8 · Oct 13, 2023
- CVE-2023-45466 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the pin_host parameter in the WPS Settings.Critical 9.8 · Oct 13, 2023
- CVE-2023-45465 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the ddnsDomainName parameter in the Dynamic DNS settings.Critical 9.8 · Oct 13, 2023
- CVE-2023-45464 Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the servDomain parameter.High 7.5 · Oct 13, 2023
- CVE-2023-45463 Netis N3Mv2-V1.0.1.865 was discovered to contain a buffer overflow via the hostName parameter in the FUN_0040dabc function.High 7.5 · Oct 13, 2023
- CVE-2023-44860 An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTTP request.High 7.5 · Oct 6, 2023
- CVE-2023-43893 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the wakeup_mac parameter in the Wake-On-LAN (WoL) function.Critical 9.8 · Oct 2, 2023
- CVE-2023-43892 Netis N3Mv2-V1.0.1.865 was discovered to contain a command injection vulnerability via the Hostname parameter within the WAN settings.Critical 9.8 · Oct 2, 2023
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.