CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

776 matches found

Positive Technologies•added 2021/04/29 12:00 a.m.•1 views

PT-2021-13769

Name of the Vulnerable Software and Affected Versions: Buffalo WSR-2533DHPL2 versions 1.02 and earlier Buffalo WSR-2533DHP3 versions 1.24 and earlier Description: The web interfaces of the affected devices do not properly restrict access to sensitive information from an unauthorized actor...

7.5CVSS0.0817EPSS

SaveExploits1References3

Positive Technologies•added 2021/04/29 12:00 a.m.•1 views

PT-2021-13768

Name of the Vulnerable Software and Affected Versions: Buffalo WSR-2533DHPL2 versions 1.02 and earlier Buffalo WSR-2533DHP3 versions 1.24 and earlier Description: The issue arises from improper sanitization of user input in the web interfaces. This could allow an authenticated remote attacker to...

8.8CVSS0.08458EPSS

SaveExploits1References4

Rapid7 Vulnerability Database (full)•added 2021/04/29 12:00 a.m.•5 views

CVE-2021-20090: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 could allow unauthenticated remote attackers to bypass authentication...

9.8CVSS5.9AI score0.99982EPSS

SaveExploits5References2

Japan Vulnerability Notes•added 2021/04/28 7:15 a.m.•16 views

Multiple Buffalo network devices contain hidden functionality

Overview Multiple network devices provided by BUFFALO INC. contain hidden functionality CWE-912 that allows an attacker to enable the debug option. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact A network-adjacent attacker...

10CVSS7.4AI score0.03179EPSS

SaveExploits0References5

Japan Vulnerability Notes•added 2021/04/28 7:14 a.m.•18 views

Multiple vulnerabilities in Buffalo broadband routers

Overview Multiple broadband routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Disclosure of sensitive information to an unauthorized user CWE-200 - CVE-2021-3511 Improper access control CWE-284 - CVE-2021-3512 Chuya Hayakawa of 00One, Inc. reported this vulnerability...

8.8CVSS7.7AI score0.00857EPSS

SaveExploits0References8

OSV•added 2021/04/28 1:15 a.m.•16 views

CVE-2021-20716

Hidden functionality in multiple Buffalo network devices BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54...

9.8CVSS6.1AI score0.03179EPSS

SaveExploits0References2

OSV•added 2021/04/28 1:15 a.m.•20 views

CVE-2021-3512

Improper access control vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and...

8.8CVSS6AI score0.00857EPSS

SaveExploits0References2

OSV•added 2021/04/28 1:15 a.m.•21 views

CVE-2021-3511

Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and...

4.3CVSS5.8AI score0.00511EPSS

SaveExploits0References2

NVD•added 2021/04/28 1:15 a.m.•36 views

CVE-2021-20716

10CVSS0.03179EPSS

SaveExploits0References2

NVD•added 2021/04/28 1:15 a.m.•28 views

CVE-2021-3512

8.8CVSS0.00857EPSS

SaveExploits0References2

NVD•added 2021/04/28 1:15 a.m.•32 views

CVE-2021-3511

4.3CVSS0.00511EPSS

SaveExploits0References2

Prion•added 2021/04/28 1:15 a.m.•20 views

Design/Logic Flaw

10CVSS9.6AI score0.03179EPSS

SaveExploits0References2Affected Software35

attackerkb•added 2021/04/28 1:15 a.m.•11 views

CVE-2021-3511

4.3CVSS5.8AI score0.00511EPSS

SaveExploits0References3Affected Software1

Prion•added 2021/04/28 1:15 a.m.•28 views

Design/Logic Flaw

3.3CVSS4.6AI score0.00511EPSS

SaveExploits0References2Affected Software24

Prion•added 2021/04/28 1:15 a.m.•35 views

Improper access control

8.3CVSS8.9AI score0.00857EPSS

SaveExploits0References2Affected Software24

attackerkb•added 2021/04/28 1:15 a.m.•12 views

CVE-2021-3512

8.8CVSS6.9AI score0.00857EPSS

SaveExploits0References3Affected Software1

attackerkb•added 2021/04/28 1:15 a.m.•16 views

CVE-2021-20716

10CVSS8.2AI score0.03179EPSS

SaveExploits0References3Affected Software1

Cvelist•added 2021/04/28 12:45 a.m.•42 views

CVE-2021-3512

9.2AI score0.00857EPSS

SaveExploits0References2

CVE•added 2021/04/28 12:45 a.m.•98 views

CVE-2021-3512

CVE-2021-3512 is an improper access control vulnerability in Buffalo broadband routers. The affected devices include a long list of Buffalo models (e.g., BHR-4GRV, WHR-300/WHR-G301N, WZR- HP family, FS series, etc.) with firmware versions prior to those named in public advisories. The issue allow...

8.8CVSS8.9AI score0.00857EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2021/04/28 12:45 a.m.•47 views

CVE-2021-3511

4.9AI score0.00511EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by