660 matches found
PT-2021-3736
Name of the Vulnerable Software and Affected Versions Buffalo WSR-2533DHPL2 firmware version = 1.02 Buffalo WSR-2533DHP3 firmware version = 1.24 Description A path traversal vulnerability in the web interfaces of Buffalo routers could allow unauthenticated remote attackers to bypass authenticatio...
Multiple vulnerabilities in Buffalo AirStation WHR-G54S
Overview Buffalo AirStation WHR-G54S contains multiple vulnerabilities listed below. Directory Traversal - CVE-2020-5605 Cross-site Scripting - CVE-2020-5606 RyotaK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...
Buffalo WHR-G54S Cross-Site Scripting Vulnerability
Buffalo WHR-G54S firmware WHR-G54S firmware,WHR-G54S firmware is a driver for Buffalo Miroku WHR-G54S wireless router from Buffalo, Japan. A cross-site scripting vulnerability exists in WHR-G54S version 1.43 and earlier versions, which can be exploited by remote attackers to inject arbitrary...
Buffalo WHR-G54S Path Traversal Vulnerability
Buffalo WHR-G54S firmware WHR-G54S firmware,WHR-G54S firmware is a driver for Buffalo Miroku WHR-G54S wireless router from Buffalo, Japan. A path traversal vulnerability exists in WHR-G54S version 1.43 and earlier versions, which arises from a failure of a network system or product to properly...
JVN#09166495: Multiple vulnerabilities in Buffalo AirStation WHR-G54S
Buffalo AirStation WHR-G54S contains multiple vulnerabilities listed below. Directory Traversal - CVE-2020-5605 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N| Base Score: 4.1 CVSS v2| AV:A/AC:L/Au:S/C:P/I:N/A:N| Base Score: 2.7 Cross-site Scripting -...
Buffalo TeraStation Command Injection (CVE-2018-13318; CVE-2018-13320; CVE-2018-13321)
A command Injection vulnerability exists in Buffalo TeraStation. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...
Operating System (OS) Detection (PPTP)
PPTP service based Operating System OS detection. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Buffalo TS5600D1206 Access Control Error Vulnerability (CNVD-2019-00678)
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the nasapi in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to call a dangerous internal function with the 'method' parameter...
Buffalo TS5600D1206 Cross-Site Scripting Vulnerability
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. A cross-site scripting vulnerability exists in the detail.html file in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by a remote attacker to execute JavaScript code via a "username" cookie...
Buffalo TS5600D1206 Command Injection Vulnerability (CNVD-2019-00674)
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. A command injection vulnerability exists in the User.create method in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited to execute system commands with the 'name' parameter...
Buffalo TS5600D1206 Access Control Error Vulnerability (CNVD-2019-00673)
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the getportalinfo method in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to determine sensitive device information by sending a...
Buffalo TS5600D1206 Directory Traversal Vulnerability
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. A directory traversal vulnerability exists in the listfolders method in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited to list the contents of a directory with the 'path' parameter...
Buffalo TS5600D1206 Command Injection Vulnerability
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. A command injection vulnerability exists in the network.setauthsettings method in the Buffalo TS5600D1206 version 3.70-0.10, which can be exploited to execute system commands with the 'adminUsername' parameter an...
Buffalo TS5600D1206 Access Control Error Vulnerability
The Buffalo TS5600D1206 is a network storage device from the Buffalo Group of Japan. An access control error vulnerability exists in the nasapi in the Buffalo TS5600D1206 version 3.61-0.10, which can be exploited by an attacker to bypass authentication by sending a modified HTTP Host packet heade...
Design/Logic Flaw
Incorrect access control in getportalinfo in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to determine sensitive device information via an unauthenticated POST request...
CVE-2018-13318
System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" parameter...
CVE-2018-13323
Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute JavaScript via the "username" cookie...
CVE-2018-13321
Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to call dangerous internal functions via the "method" parameter...
