Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
HIGH 8.1
CVE-2019-11061
A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devic…
Hg100 Firmware
4.00.09+
HIGH 7.5
CVE-2019-11060
The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause …
Hg100 Firmware
after 1.05.12
CRITICAL 9.1
CVE-2017-17945
The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.
Hivivo
1.1.09 / 5.6.27+
CRITICAL 9.1
CVE-2017-17944
The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.
Hivivo
1.1.09 / 5.6.27+
CRITICAL 9.8
CVE-2018-14714EPSS 27%
System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" …
Rt Ac3200 Firmware
No fix yet
HIGH 8.1
CVE-2018-14713
Format string vulnerability in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to read arbitrary sections of memory and CPU r…
Rt Ac3200 Firmware
No fix yet
MEDIUM 6.5
CVE-2018-14711
Missing cross-site request forgery protection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to cause state-changing acti…
Rt Ac3200 Firmware
No fix yet
MEDIUM 6.5
CVE-2018-14712
Buffer overflow in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to inject system commands via the "hook" URL parameter.
Rt Ac3200 Firmware
No fix yet
MEDIUM 6.1
CVE-2018-14710EPSS 5%
Cross-site scripting in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute JavaScript via the "hook" URL parameter.
Rt Ac3200 Firmware
No fix yet
HIGH 7.8
CVE-2018-14993
The ASUS Zenfone V Live Android device with a build fingerprint of asus/VZW_ASUS_A009/ASUS_A009:7.1.1/NMF26F/14.0610.1802.78-20180313:user/release-ke…
Zenfone V Live Firmware
Mitigation only
HIGH 7.1
CVE-2018-14980
The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-k…
Zenfone 3 Max Firmware
Mitigation only
MEDIUM 5.5
CVE-2018-14992
The ASUS ZenFone 3 Max Android device with a build fingerprint of asus/US_Phone/ASUS_X008_1:7.0/NRD90M/US_Phone-14.14.1711.92-20171208:user/release-k…
Zenfone 3 Max Firmware
No fix yet
HIGH 7.8
CVE-2018-18535
The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers (MSRs). This c…
Aura Sync Firmware
No fix yet
HIGH 7.8
CVE-2018-18536
The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. This could …
Aura Sync Firmware
No fix yet
MEDIUM 5.5
CVE-2018-18537
The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.
Aura Sync Firmware
No fix yet
MEDIUM 6.1
CVE-2018-18291
A cross site scripting (XSS) vulnerability on ASUS RT-AC58U 3.0.0.4.380_6516 devices allows remote attackers to inject arbitrary web script or HTML v…
Rt Ac58u Firmware
No fix yet
MEDIUM 5.3
CVE-2018-18287
On ASUS RT-AC58U 3.0.0.4.380_6516 devices, remote attackers can discover hostnames and IP addresses by reading dhcpLeaseInfo data in the HTML source …
Rt Ac58u Firmware
No fix yet
HIGH 7.5
CVE-2018-17127
blocking_request.cgi on ASUS GT-AC5300 devices through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (NULL pointer dereferen…
Gt Ac5300 Firmware
after 3.0.0.4.384.32738
HIGH 8.8
CVE-2018-17023
Cross-site request forgery (CSRF) vulnerability on ASUS GT-AC5300 routers with firmware through 3.0.0.4.384_32738 allows remote attackers to hijack t…
Gt Ac5300 Firmware
after 3.0.0.4.384_32738
HIGH 7.5
CVE-2018-17020
ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allow remote attackers to cause a denial of service via a single "GET / HTTP/1.1\r\n" …
Gt Ac5300 Firmware
after 3.0.0.4.384_32738
HIGH 7.2
CVE-2018-17022
Stack-based buffer overflow on the ASUS GT-AC5300 router through 3.0.0.4.384_32738 allows remote attackers to cause a denial of service (device crash…
Gt Ac5300 Firmware
after 3.0.0.4.384_32738
MEDIUM 6.1
CVE-2018-17021
Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allows remote attackers to inject arbitrar…
Gt Ac5300 Firmware
after 3.0.0.4.384_32738
HIGH 8.8
CVE-2018-0647
Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication …
Wl 330nul Firmware
3.0.0.46+
HIGH 8.8
CVE-2018-15887
Main_Analysis_Content.asp in ASUS DSL-N12E_C1 1.1.2.3_345 is prone to Authenticated Remote Command Execution, which allows a remote attacker to execu…
Dsl N12e C1 Firmware
No fix yet
HIGH 7.5
CVE-2018-11492EPSS 11%
ASUS HG100 devices allow denial of service via an IPv4 packet flood.
Hg100 Firmware
No fix yet
CRITICAL 9.8
CVE-2018-11491EPSS 7%
ASUS HG100 devices with firmware before 1.05.12 allow unauthenticated access, leading to remote command execution.
Hg100 Firmware
1.05.12+
CRITICAL 9.8
CVE-2016-6558
A command injection vulnerability exists in apply.cgi on the ASUS RP-AC52 access point, firmware version 1.0.1.1s and possibly earlier, web interface…
Rp Ac52 Firmware
after 1.0.1.1s
HIGH 8.8
CVE-2016-6557
In ASUS RP-AC52 access points with firmware version 1.0.1.1s and possibly earlier, the web interface, the web interface does not sufficiently verify …
Rp Ac52 Firmware
after 1.0.1.1s
MEDIUM 6.1
CVE-2018-0583
Cross-site scripting vulnerability in ASUS RT-AC1200HP Firmware version prior to 3.0.0.4.380.4180 allows remote attackers to inject arbitrary web scr…
Rt Ac1200hp Firmware
3.0.0.4.380.4180+
MEDIUM 6.1
CVE-2018-0581
Cross-site scripting vulnerability in ASUS RT-AC87U Firmware version prior to 3.0.0.4.378.9383 allows remote attackers to inject arbitrary web script…
Rt Ac87u Firmware
3.0.0.4.378.9383+