28738 matches found
CVE-2025-64347
Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes...
CVE-2025-64347
Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes...
CVE-2025-64347 Apollo Router Improperly Enforces Renamed Access Control Directives
Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes...
CVE-2025-64347 Apollo Router Improperly Enforces Renamed Access Control Directives
Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes...
EUVD-2025-38037
Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes...
CVE-2025-64347 Apollo Router Improperly Enforces Renamed Access Control Directives
Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes...
CVE-2025-64347
CVE-2025-64347 concerns Apollo Router Core. Affected: Router Core with Apollo Federation 2, specifically versions 1.61.12-rc.0 and below, and 2.8.1-rc.0 and below. Root cause: access control directives renamed via @link imports were not enforced on renamed schema elements (e.g., fields and types)...
CVE-2025-46413
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker...
CVE-2025-46413
CVE-2025-46413 affects BUFFALO WSR-1800AX4 series Wi‑Fi routers. The issue is use of a password hash with insufficient computational effort (CWE-916) when WPS is enabled, potentially allowing an attacker to obtain the PIN and/or Wi‑Fi password. Public documents identify the affected component as ...
CVE-2025-64347: Improper Access Control
Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control directives @authenticated, @requiresScopes...
TOTOLINK A7000R urldecode DoS
The vulnerability of the urldecode function in TOTOLINK A7000R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...
Tenda AX1803 Router DoS
The vulnerability of the formfastsettingwifiset function in the Tenda AX1803 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...
TOTOLINK LR350 Router DoS
The vulnerability of the sub42396C function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
Apollo Router Core Access Control Vulnerability
Apollo Router Core is a router core application for the Apollo community. An access control error vulnerability exists in Apollo Router Core versions 1.61.12-rc.0 and earlier and 2.8.1-rc.0, which stems from not enforcing renamed access control commands, which could lead to bypassing element-leve...
TOTOLINK LR350 Router DoS
The vulnerability of the sub422880 function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-46413: Use of Password Hash With Insufficient Computational Effort
Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'. When WPS is enabled, PIN code and/or Wi-Fi password may be obtained by an attacker...
Tenda AC6 Code Execution
The vulnerability of the /goform/WifiGuestSet file in the Tenda AC6 microprogramming router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
TOTOLINK A7000R Router DoS
The vulnerability of sub421A04 in the microprogramming software of TOTOLINK A7000R routers is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
Tenda AC15 Code Execution
The vulnerability of the /goform/saveAutoQos microprogramming system for Tenda AC15 routers lies in the fact that the operation’s output goes beyond the buffer in memory when processing the enable parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Tenda CH22 Router Code Execution
The vulnerability of the fromSafeUrlFilter function /goform/SafeUrlFilter in the Tenda CH22 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending a...