Vulnerability index

Browse CVEs

11 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

HIGH 7.2 CVE-2023-49038 Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as… Ls210d Firmware No fix yet Fix from $1,9502024-01-29 HIGH 8.1 CVE-2023-51073 An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifi… Ls210d Firmware No fix yet Fix from $1,9502024-01-11 HIGH 7.5 CVE-2023-39620 An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest a… Terastation Nas 5410r Firmware No fix yet Fix from $1,9502023-09-08 CRITICAL 9.8 CVE-2018-13324EPSS 23% Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host… Ts5600d1206 Firmware No fix yet Fix from $2,3002018-11-26 HIGH 8.8 CVE-2018-13321 Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" pa… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 HIGH 7.5 CVE-2018-13319 Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via a… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 HIGH 7.2 CVE-2018-13318 System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" pa… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 HIGH 7.2 CVE-2018-13320 System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the ad… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 MEDIUM 6.5 CVE-2018-13322 Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parame… Ts5600d1206 Firmware No fix yet Fix from $1,6002018-11-26 MEDIUM 6.1 CVE-2018-13323 Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie. Ts5600d1206 Firmware No fix yet Fix from $1,6002018-11-26 MEDIUM 6.8 CVE-2017-10811 Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors. Wcr 1166ds Firmware Mitigation only Fix from $1,6002017-08-18