Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
HIGH 7.2
CVE-2023-49038
Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as…
Ls210d Firmware
No fix yet
HIGH 8.1
CVE-2023-51073
An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifi…
Ls210d Firmware
No fix yet
HIGH 7.5
CVE-2023-39620
An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest a…
Terastation Nas 5410r Firmware
No fix yet
CRITICAL 9.8
CVE-2018-13324EPSS 23%
Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host…
Ts5600d1206 Firmware
No fix yet
HIGH 8.8
CVE-2018-13321
Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" pa…
Ts5600d1206 Firmware
No fix yet
HIGH 7.5
CVE-2018-13319
Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via a…
Ts5600d1206 Firmware
No fix yet
HIGH 7.2
CVE-2018-13318
System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" pa…
Ts5600d1206 Firmware
No fix yet
HIGH 7.2
CVE-2018-13320
System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the ad…
Ts5600d1206 Firmware
No fix yet
MEDIUM 6.5
CVE-2018-13322
Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parame…
Ts5600d1206 Firmware
No fix yet
MEDIUM 6.1
CVE-2018-13323
Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie.
Ts5600d1206 Firmware
No fix yet
MEDIUM 6.8
CVE-2017-10811
Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.
Wcr 1166ds Firmware
Mitigation only