Vulnerability index

Browse CVEs

54 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Airstation Whr G54s Firmware MEDIUM 6.1
CVE-2020-5606

Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted p…

Fix: after 1.43
Fix from $1,600 2020-09-18
Open Xdmod CRITICAL 9.8
CVE-2018-16988

An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A bru…

Fix: 8.0.0+
Fix from $2,300 2019-05-02
Open Xdmod HIGH 7.5
CVE-2018-16961

An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remot…

Fix: after 7.5.0
Fix from $1,950 2019-05-02
Open Xdmod MEDIUM 6.1
CVE-2018-16960

An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS via the xd_user_formal_name parameter.

Fix: after 7.5.0
Fix from $1,600 2019-05-02
Ts5600d1206 Firmware CRITICAL 9.8
CVE-2018-13324EPSS 23%

Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host…

No fix yet
Fix from $2,300 2018-11-26
Ts5600d1206 Firmware HIGH 8.8
CVE-2018-13321

Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" pa…

No fix yet
Fix from $1,950 2018-11-26
Ts5600d1206 Firmware HIGH 7.5
CVE-2018-13319

Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via a…

No fix yet
Fix from $1,950 2018-11-26
Ts5600d1206 Firmware HIGH 7.2
CVE-2018-13318

System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" pa…

No fix yet
Fix from $1,950 2018-11-26
Ts5600d1206 Firmware HIGH 7.2
CVE-2018-13320

System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the ad…

No fix yet
Fix from $1,950 2018-11-26
Ts5600d1206 Firmware MEDIUM 6.5
CVE-2018-13322

Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parame…

No fix yet
Fix from $1,600 2018-11-26
Ts5600d1206 Firmware MEDIUM 6.1
CVE-2018-13323

Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie.

No fix yet
Fix from $1,600 2018-11-26
Wzr 1750dhp2 Firmware HIGH 8.8
CVE-2018-0554

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified ve…

Fix: after 2.30
Fix from $1,950 2018-04-09
Wzr 1750dhp2 Firmware HIGH 8.8
CVE-2018-0556

Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

Fix: after 2.30
Fix from $1,950 2018-04-09
Wzr 1750dhp2 Firmware HIGH 7.8
CVE-2018-0555

Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file.

Fix: after 2.30
Fix from $1,950 2018-04-09
Wxr 1900dhp2 Firmware HIGH 8.8
CVE-2018-0521

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspe…

Fix: after 2.48
Fix from $1,950 2018-03-09
Wxr 1900dhp2 Firmware HIGH 8.8
CVE-2018-0523

Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

Fix: after 2.48
Fix from $1,950 2018-03-09
Wxr 1900dhp2 Firmware HIGH 7.8
CVE-2018-0522

Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file.

Fix: after 2.48
Fix from $1,950 2018-03-09
Bbr 4mg Firmware MEDIUM 6.1
CVE-2017-10896

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacke…

Fix: after 2.07
Fix from $1,600 2017-12-08
Wcr 1166ds Firmware MEDIUM 6.8
CVE-2017-10811

Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.

Mitigation only
Fix from $1,600 2017-08-18
Wapm 1166d Firmware CRITICAL 9.8
CVE-2017-2126

WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access t…

Fix: after 1.16.1
Fix from $2,300 2017-07-22
Wmr 433 Firmware HIGH 8.8
CVE-2017-2273

Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attack…

Fix: after 1.40
Fix from $1,950 2017-07-22
Wmr 433 Firmware MEDIUM 6.1
CVE-2017-2274

Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject…

Fix: after 1.40
Fix from $1,600 2017-07-22
Wzr 600dhp3 Firmware MEDIUM 6.5
CVE-2016-4816

BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive…

Fix: after 2.16
Fix from $1,600 2016-06-19
Wzr 900dhp2 Firmware HIGH 7.5
CVE-2016-4815

Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlie…

Fix: after 2.16
Fix from $1,950 2016-06-19