666 matches found
JVN#97144273: Multiple vulnerabilities in WXR-1900DHP2
WXR-1900DHP2 provided by BUFFALO INC. is a wireless LAN router. WXR-1900DHP2 contains multiple vulnerabilities listed below. Missing Authentication for Critical Function CWE-306 - CVE-2018-0521 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H| Base Score:...
buffalo-theatre.com XSS vulnerability
Open Bug Bounty ID: OBB-483798 Description| Value ---|--- Affected Website:| buffalo-theatre.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...
Buffalo BBR-4HG and BBR-4MG Denial of Service Vulnerabilities
The Buffalo BBR-4HG and BBR-4MG are both broadband router products from the Buffalo Group of Japan. An input validation vulnerability exists in the Buffalo BBR-4HG and BBR-4MG broadband routers using firmware versions 1.00 through 1.48 and 2.00 through 2.07. An attacker could exploit the...
Buffalo BBR-4HG and BBR-4MG Cross-Site Scripting Vulnerabilities
The Buffalo BBR-4HG and BBR-4MG are both broadband router products from the Buffalo Group of Japan. A cross-site scripting vulnerability exists in the Buffalo BBR-4HG and BBR-4MG broadband routers using firmware versions 1.00 through 1.48 and 2.00 through 2.07. A remote attacker could exploit thi...
CVE-2017-10896
Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
Input validation
Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...
Cross site scripting
Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-10897
Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...
CVE-2017-10896
Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-10897
Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...
CVE-2017-10897
Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device to become unresponsive via unspecified vectors...
CVE-2017-10897
The CVE-2017-10897 vulnerability affects Buffalo BBR-4HG and BBR-4MG broadband routers, where an input validation issue in firmware versions 1.00–1.48 and 2.00–2.07 can cause the device to become unresponsive via unspecified vectors. The root cause is improper input validation on the administrati...
CVE-2017-10896
Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-10896
Buffalo BBR-4HG and BBR-4MG broadband routers (firmware 1.00–1.48 and 2.00–2.07) are affected by CVE-2017-10896, a Cross-site Scripting (CWE-79) vulnerability. The flaw allows an attacker to inject arbitrary web script or HTML into the management/web UI via unspecified vectors, potentially execut...
Multiple vulnerabilities in multiple Buffalo broadband routers
Overview BBR-4HG and BBR-4MG provided by BUFFALO INC. are wireless LAN routers. BBR-4HG and BBR-4MG contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2017-10896 Improper Input Validation CWE-20 - CVE-2017-10897 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions,...
JVN#65994435: Multiple vulnerabilities in multiple Buffalo broadband routers
BBR-4HG and BBR-4MG provided by BUFFALO INC. are wireless LAN routers. BBR-4HG and BBR-4MG contain multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2017-10896 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...
buffalo-theatre.com XSS vulnerability
Open Bug Bounty ID: OBB-361004 Description| Value ---|--- Affected Website:| buffalo-theatre.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...
admissions.buffalo.edu XSS vulnerability
Open Bug Bounty ID: OBB-281871 Description| Value ---|--- Affected Website:| admissions.buffalo.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...