Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

666 matches found

OSV
OSV•added 2021/04/29 3:15 p.m.•2 views

CVE-2021-20090

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 could allow unauthenticated remote attackers to bypass authentication...

9.8CVSS7.4AI score0.99983EPSS
SaveExploits5References4
OSV
OSV•added 2021/04/29 3:15 p.m.•10 views

CVE-2021-20092

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...

7.5CVSS7.3AI score0.0817EPSS
SaveExploits1References1
NVD
NVD•added 2021/04/29 3:15 p.m.•33 views

CVE-2021-20090

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 could allow unauthenticated remote attackers to bypass authentication...

9.8CVSS0.99983EPSS
SaveExploits5References4
NVD
NVD•added 2021/04/29 3:15 p.m.•34 views

CVE-2021-20092

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...

7.5CVSS0.0817EPSS
SaveExploits1References1
OSV
OSV•added 2021/04/29 3:15 p.m.•9 views

CVE-2021-20091

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution...

8.8CVSS7.6AI score0.08796EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB•added 2021/04/29 3:15 p.m.•9 views

CVE-2021-20092

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...

7.5CVSS7.3AI score0.0817EPSS
SaveExploits1References3
Prion
Prion•added 2021/04/29 3:15 p.m.•24 views

Remote code execution

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution...

6.5CVSS9.3AI score0.08796EPSS
SaveExploits1References1Affected Software2
Prion
Prion•added 2021/04/29 3:15 p.m.•42 views

Path traversal

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 could allow unauthenticated remote attackers to bypass authentication...

7.5CVSS8.1AI score0.99983EPSS
SaveExploits5References3Affected Software2
ATTACKERKB
ATTACKERKB•added 2021/04/29 3:15 p.m.•6 views

CVE-2021-20091

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution...

8.8CVSS8.1AI score0.08796EPSS
SaveExploits1References3
Prion
Prion•added 2021/04/29 3:15 p.m.•40 views

Design/Logic Flaw

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...

5CVSS8.4AI score0.0817EPSS
SaveExploits1References1Affected Software2
CVE
CVE•added 2021/04/29 2:29 p.m.•141 views

CVE-2021-20092

Buffalo WSR-2533DHPL2 (firmware ≤ 1.02) and WSR-2533DHP3 (firmware ≤ 1.24) web interfaces expose an improper access control vulnerability (CVE-2021-20092). An unauthenticated user can access sensitive information and, per sources, potentially alter router configuration. Exploitation is described ...

7.5CVSS8.3AI score0.0817EPSS
SaveIn wildExploits1References1Affected Software1
Cvelist
Cvelist•added 2021/04/29 2:29 p.m.•42 views

CVE-2021-20092

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly restrict access to sensitive information from an unauthorized actor...

8.7AI score0.0817EPSS
SaveExploits1References1
Cvelist
Cvelist•added 2021/04/29 2:29 p.m.•41 views

CVE-2021-20091

The web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution...

9.7AI score0.08796EPSS
SaveExploits1References1
CVE
CVE•added 2021/04/29 2:29 p.m.•118 views

CVE-2021-20091

Affected products: Buffalo WSR-2533DHPL2 (firmware <= 1.02) and Buffalo WSR-2533DHP3 (firmware

8.8CVSS9.3AI score0.08796EPSS
SaveExploits1References1Affected Software1
CVE
CVE•added 2021/04/29 12:00 a.m.•1383 views

CVE-2021-20090

The CVE-2021-20090 issue affects Buffalo WSR-series routers (WSR-2533DHPL2 <= 1.02 and WSR-2533DHP3

9.8CVSS8.1AI score0.99983EPSS
SaveIn wildExploits5References4Affected Software1
ATTACKERKB
ATTACKERKB•added 2021/04/29 12:00 a.m.•41 views

CVE-2021-20090

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 could allow unauthenticated remote attackers to bypass authentication. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

9.8CVSS8.2AI score0.99983EPSS
SaveIn wildExploits5References4
Cvelist
Cvelist•added 2021/04/29 12:00 a.m.•60 views

CVE-2021-20090

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 could allow unauthenticated remote attackers to bypass authentication...

8.5AI score0.99983EPSS
SaveExploits5References3
Vulnrichment
Vulnrichment•added 2021/04/29 12:00 a.m.•15 views

CVE-2021-20090

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version = 1.02 and WSR-2533DHP3 firmware version = 1.24 could allow unauthenticated remote attackers to bypass authentication...

9.5AI score0.99983EPSS
SaveExploits5References3
Japan Vulnerability Notes
Japan Vulnerability Notes•added 2021/04/28 7:15 a.m.•11 views

Multiple Buffalo network devices contain hidden functionality

Overview Multiple network devices provided by BUFFALO INC. contain hidden functionality CWE-912 that allows an attacker to enable the debug option. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact A network-adjacent attacker...

10CVSS7.4AI score0.03179EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes•added 2021/04/28 7:14 a.m.•11 views

Multiple vulnerabilities in Buffalo broadband routers

Overview Multiple broadband routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Disclosure of sensitive information to an unauthorized user CWE-200 - CVE-2021-3511 Improper access control CWE-284 - CVE-2021-3512 Chuya Hayakawa of 00One, Inc. reported this vulnerability...

8.8CVSS7.7AI score0.00857EPSS
SaveExploits0References8
Rows per page
Query Builder