Browse CVEs

CRITICAL 9.8 CVE-2026-45779 OpenXDMoD is an open framework for collecting and analyzing HPC metrics. An SQL injection vulnerability exists in Open XDMoD versions prior to 10.0.3… Open Xdmod 10.0.3+ Fix from $2,3002026-06-05 CRITICAL 9.8 CVE-2026-45777 OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Starting in version 9.5.0 and prior to version 11.0.3, an attacker can remot… Open Xdmod 11.0.3+ Fix from $2,3002026-06-05 MEDIUM 5.4 CVE-2026-45778 OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, an authenticated attacker can inject malicious Java… Open Xdmod 11.0.3+ Fix from $1,6002026-06-05 CRITICAL 9.8 CVE-2026-27650 OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be execut… Wcr 1166dhpl Firmware 1.01 / 2.53+ Fix from $2,3002026-03-27 CRITICAL 9.8 CVE-2026-32669 Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary code may be executed on the pr… Wcr 1166dhpl Firmware 1.01 / 2.53+ Fix from $2,3002026-03-27 CRITICAL 9.8 CVE-2026-33280 Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionali… Wcr 1166dhpl Firmware 1.01 / 2.53+ Fix from $2,3002026-03-27 HIGH 7.5 CVE-2026-32678 Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without aut… Wzr S900dhp Firmware 1.01 / 2.53+ Fix from $1,9502026-03-27 MEDIUM 5.3 CVE-2026-33366 Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product with… Wcr 1166dhpl Firmware 1.01 / 2.53+ Fix from $1,6002026-03-27 CRITICAL 9.8 CVE-2024-23486 Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access… Wsr 2533dhp Firmware 1.07 / 1.11+ Fix from $2,3002024-04-15 HIGH 7.2 CVE-2023-49038 Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as… Ls210d Firmware No fix yet Fix from $1,9502024-01-29 HIGH 8.1 CVE-2023-51073 An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifi… Ls210d Firmware No fix yet Fix from $1,9502024-01-11 MEDIUM 6.5 CVE-2023-51363 VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who can access the product's web management page to obtain… Vr S1000 Firmware after 2.37 Fix from $1,6002023-12-26 HIGH 7.8 CVE-2023-46681 Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier allows an… Vr S1000 Firmware after 2.37 Fix from $1,9502023-12-26 MEDIUM 6.8 CVE-2023-45741 VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web management page to execute arbitrary OS commands. Vr S1000 Firmware after 2.37 Fix from $1,6002023-12-26 HIGH 7.5 CVE-2023-39620 An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest a… Terastation Nas 5410r Firmware No fix yet Fix from $1,9502023-09-08 HIGH 7.5 CVE-2023-26588 Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected p… Bs Gsl2024 Firmware after 1.10-0.03 Fix from $1,9502023-04-11 HIGH 8.1 CVE-2023-24544 Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a res… Bs Gsl2024 Firmware after 1.10-0.03 Fix from $1,9502023-04-11 MEDIUM 5.4 CVE-2023-24464 Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to e… Bs Gs2008 Firmware after 1.0.10.01 Fix from $1,6002023-04-11 HIGH 8.8 CVE-2022-43443 OS command injection vulnerability in Buffalo network devices allows an network-adjacent attacker to execute an arbitrary OS command if a specially c… Wsr 3200ax4s Firmware after 1.26 Fix from $1,9502022-12-19 MEDIUM 6.8 CVE-2022-43466 OS command injection vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute an arbit… Wsr 3200ax4s Firmware after 1.26 Fix from $1,6002022-12-19 MEDIUM 6.8 CVE-2022-43486 Hidden functionality vulnerability in Buffalo network devices allows a network-adjacent attacker with an administrative privilege to enable the debug… Wsr 3200ax4s Firmware after 1.26 Fix from $1,6002022-12-19 HIGH 8.8 CVE-2022-40966 Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to bypass authentication and access the de… Wcr 300 Firmware after 2.96 Fix from $1,9502022-12-07 MEDIUM 6.8 CVE-2022-39044 Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent attacker with an administrative privilege to execute… Wcr 300 Firmware after 2.00 Fix from $1,6002022-12-07 MEDIUM 6.5 CVE-2022-34840 Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network-adjacent attacker to alter?configuration settings of… Wzr 300hp Firmware after 2.00 Fix from $1,6002022-12-07 HIGH 8.8 CVE-2021-20731 WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root pr… Wsr 1166dhp4 Firmware after 1.16 Fix from $1,9502021-06-09 CRITICAL 9.8 CVE-2021-20090 KEVEPSS 100% A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 coul… Wsr 2533dhpl2 Bk Firmware after 1.24 Fix from $2,3002021-04-29 HIGH 8.8 CVE-2021-20091EPSS 9% The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. A… Wsr 2533dhpl2 Bk Firmware after 1.24 Fix from $1,9502021-04-29 HIGH 7.5 CVE-2021-20092EPSS 8% The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sen… Wsr 2533dhpl2 Bk Firmware after 1.24 Fix from $1,9502021-04-29 CRITICAL 9.8 CVE-2021-20716 Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware … Bhr 4rv Firmware after 2.55 Fix from $2,3002021-04-28 HIGH 8.8 CVE-2021-3512 Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, … Bhr 4grv Firmware 1.84 / 1.87+ Fix from $1,9502021-04-28