bbr-rijswijk.nl Cross Site Scripting vulnerability OBB-4041016

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Arcadyan Directory Traversal Vulnerability (Apr 2021) - Active Check

Arcadyan devices are prone to a directory traversal vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Akamai Improves Global Delivery Performance

As part of Akamai's ongoing investments in improving delivery performance, last month we completed the worldwide deployment of the Bottleneck Bandwidth and RTT BBR TCP congestion control algorithm across our Edge Platform. The BBR algorithm is designed to help improve the reliability and resilien...

CVE-2019-3786 BBR could run arbitrary scripts on deployment VMs

Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the authenticity of backup scripts in BOSH. A remote authenticated malicious user can modify the metadata file of a Bosh Backup and Restore job to request extra backup files from different jobs upon restore. Th...

Buffalo BBR-4HG and BBR-4MG Denial of Service Vulnerabilities

The Buffalo BBR-4HG and BBR-4MG are both broadband router products from the Buffalo Group of Japan. An input validation vulnerability exists in the Buffalo BBR-4HG and BBR-4MG broadband routers using firmware versions 1.00 through 1.48 and 2.00 through 2.07. An attacker could exploit the...

CVE-2017-10896

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

Input validation

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

CVE-2017-10896

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10897

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

CVE-2017-10897

The CVE-2017-10897 vulnerability affects Buffalo BBR-4HG and BBR-4MG broadband routers, where an input validation issue in firmware versions 1.00–1.48 and 2.00–2.07 can cause the device to become unresponsive via unspecified vectors. The root cause is improper input validation on the administrati...

CVE-2017-10897

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

CVE-2017-10896

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-10896

Buffalo BBR-4HG and BBR-4MG broadband routers (firmware 1.00–1.48 and 2.00–2.07) are affected by CVE-2017-10896, a Cross-site Scripting (CWE-79) vulnerability. The flaw allows an attacker to inject arbitrary web script or HTML into the management/web UI via unspecified vectors, potentially execut...

CVE-2017-10896: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-11591

Name of the Vulnerable Software and Affected Versions Buffalo BBR-4HG and BBR-4MG versions 1.00 through 1.48 Buffalo BBR-4HG and BBR-4MG versions 2.00 through 2.07 Description The issue is related to input validation, allowing an attacker to cause the device to become unresponsive. The exact...

CVE-2017-10897: Improper Input Validation

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...

PT-2017-11590

Name of the Vulnerable Software and Affected Versions Buffalo BBR-4HG and BBR-4MG versions 1.00 through 1.48 Buffalo BBR-4HG and BBR-4MG versions 2.00 through 2.07 Description A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

JVN#65994435: Multiple vulnerabilities in multiple Buffalo broadband routers

BBR-4HG and BBR-4MG provided by BUFFALO INC. are wireless LAN routers. BBR-4HG and BBR-4MG contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2017-10896 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...

PT-2011-3055

Name of the Vulnerable Software and Affected Versions Buffalo WHR, WZR2, WZR, WER, and BBR series routers versions 1.x Buffalo BHR-4RV and FS-G54 routers versions 2.x Buffalo AS-100 routers affected versions not specified Description The issue allows remote attackers to hijack the authentication ...

CVE-2011-1324: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for...