Browse CVEs

HIGH 7.2 CVE-2023-20820 In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System executi… Openwrt Mitigation only Fix from $1,9502023-09-04 MEDIUM 5.4 CVE-2021-45904 OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen. Openwrt No fix yet Fix from $1,6002021-12-27 MEDIUM 5.4 CVE-2021-45905 OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen. Openwrt No fix yet Fix from $1,6002021-12-27 MEDIUM 5.4 CVE-2021-45906 OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen. Openwrt No fix yet Fix from $1,6002021-12-27 MEDIUM 5.9 CVE-2019-5102 An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote… Openwrt No fix yet Fix from $1,6002019-11-18 MEDIUM 5.9 CVE-2019-5101 An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote… Openwrt No fix yet Fix from $1,6002019-11-18 HIGH 7.5 CVE-2019-15513 An issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface) before 15.05.1 as used on Motorola CX2L MWR04L 1.01 a… Libuci No fix yet Fix from $1,9502019-08-23 HIGH 8.8 CVE-2018-11116 OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl.d files, which allows remote authenticated users to call arbitrary … Openwrt Mitigation only Fix from $1,9502018-06-19