Browse CVEs

MEDIUM 6.1 CVE-2020-5606 Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted p… Airstation Whr G54s Firmware after 1.43 Fix from $1,6002020-09-18 CRITICAL 9.8 CVE-2018-16988 An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A bru… Open Xdmod 8.0.0+ Fix from $2,3002019-05-02 HIGH 7.5 CVE-2018-16961 An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remot… Open Xdmod after 7.5.0 Fix from $1,9502019-05-02 MEDIUM 6.1 CVE-2018-16960 An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS via the xd_user_formal_name parameter. Open Xdmod after 7.5.0 Fix from $1,6002019-05-02 CRITICAL 9.8 CVE-2018-13324EPSS 23% Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to bypass authentication by sending a modified HTTP Host… Ts5600d1206 Firmware No fix yet Fix from $2,3002018-11-26 HIGH 8.8 CVE-2018-13321 Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" pa… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 HIGH 7.5 CVE-2018-13319 Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via a… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 HIGH 7.2 CVE-2018-13318 System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" pa… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 HIGH 7.2 CVE-2018-13320 System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10 allows attackers to execute system commands via the ad… Ts5600d1206 Firmware No fix yet Fix from $1,9502018-11-26 MEDIUM 6.5 CVE-2018-13322 Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to list directory contents via the "path" parame… Ts5600d1206 Firmware No fix yet Fix from $1,6002018-11-26 MEDIUM 6.1 CVE-2018-13323 Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie. Ts5600d1206 Firmware No fix yet Fix from $1,6002018-11-26 HIGH 8.8 CVE-2018-0554 Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified ve… Wzr 1750dhp2 Firmware after 2.30 Fix from $1,9502018-04-09 HIGH 8.8 CVE-2018-0556 Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Wzr 1750dhp2 Firmware after 2.30 Fix from $1,9502018-04-09 HIGH 7.8 CVE-2018-0555 Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file. Wzr 1750dhp2 Firmware after 2.30 Fix from $1,9502018-04-09 HIGH 8.8 CVE-2018-0521 Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspe… Wxr 1900dhp2 Firmware after 2.48 Fix from $1,9502018-03-09 HIGH 8.8 CVE-2018-0523 Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Wxr 1900dhp2 Firmware after 2.48 Fix from $1,9502018-03-09 HIGH 7.8 CVE-2018-0522 Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file. Wxr 1900dhp2 Firmware after 2.48 Fix from $1,9502018-03-09 MEDIUM 6.1 CVE-2017-10896 Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacke… Bbr 4mg Firmware after 2.07 Fix from $1,6002017-12-08 MEDIUM 6.8 CVE-2017-10811 Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors. Wcr 1166ds Firmware Mitigation only Fix from $1,6002017-08-18 CRITICAL 9.8 CVE-2017-2126 WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access t… Wapm 1166d Firmware after 1.16.1 Fix from $2,3002017-07-22 HIGH 8.8 CVE-2017-2273 Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attack… Wmr 433 Firmware after 1.40 Fix from $1,9502017-07-22 MEDIUM 6.1 CVE-2017-2274 Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to inject… Wmr 433 Firmware after 1.40 Fix from $1,6002017-07-22 MEDIUM 6.5 CVE-2016-4816 BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices allow remote attackers to discover credentials and other sensitive… Wzr 600dhp3 Firmware after 2.16 Fix from $1,6002016-06-19 HIGH 7.5 CVE-2016-4815 Directory traversal vulnerability on BUFFALO WZR-600DHP3 devices with firmware 2.16 and earlier and WZR-S600DHP devices with firmware 2.16 and earlie… Wzr 900dhp2 Firmware after 2.16 Fix from $1,9502016-06-19