Lucene search
+L

8838 matches found

OSV
OSV
added 2024/04/15 11:15 a.m.8 views

CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

9.8CVSS5.8AI score0.00561EPSS
SaveExploits0References2
NVD
NVD
added 2024/04/15 11:15 a.m.32 views

CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

9.8CVSS6.7AI score0.00561EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/04/15 10:50 a.m.33 views

CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

6.9AI score0.00561EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/04/15 10:50 a.m.19 views

CVE-2024-23486

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials...

7.1AI score0.00561EPSS
SaveExploits0References2
CVE
CVE
added 2024/04/15 10:50 a.m.80 views

CVE-2024-23486

Buffalo BUFFALO wireless LAN routers are affected by CVE-2024-23486 due to plaintext storage of passwords, enabling a network-adjacent, unauthenticated attacker with access to the login page to obtain configured credentials. The issue is documented for multiple WSR-series models (e.g., WSR-... va...

9.8CVSS6.9AI score0.00561EPSS
SaveExploits0References2Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/04/15 7:29 a.m.14 views

Multiple vulnerabilities in BUFFALO wireless LAN routers

Overview Multiple wireless LAN routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Plaintext storage of a password CWE-256 OS Command Injection CWE-78 Satoru Nagaoka of Cyber Defense Institute, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the...

9.8CVSS7.6AI score0.00561EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/04/15 12:00 a.m.9 views

PT-2024-19894 · Buffalo · Buffalo Wireless Lan Routers

Name of the Vulnerable Software and Affected Versions: BUFFALO wireless LAN routers affected versions not specified Description: A plaintext storage of a password issue exists, which may allow a network-adjacent unauthenticated attacker with access to the product's login page to obtain configured...

9.8CVSS6.2AI score0.00561EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/04/15 12:00 a.m.48 views

JVN#58236836: Multiple vulnerabilities in BUFFALO wireless LAN routers

Multiple wireless LAN routers provided by BUFFALO INC. contain multiple vulnerabilities listed below. Plaintext storage of a password CWE-256 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Base Score 6.5 CVE-2024-23486 OS Command Injection CWE-78 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base...

9.8CVSS6.7AI score0.00561EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/04/12 12:00 a.m.9 views

Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved ACX versions 23.1R1-EVO through 23.2R2-EVO, which arises from a plaintext storage vulnerability in a disk file that could allow a local,...

6.7CVSS6.5AI score0.00136EPSS
SaveExploits0References5
CVE
CVE
added 2024/04/10 12:00 a.m.7724 views

CVE-2024-30710

CVE-2024-30710 is rejected/not used and does not represent an active vulnerability entry.

6.7AI score
SaveExploits0
CVE
CVE
added 2024/04/10 12:00 a.m.6858 views

CVE-2024-30727

CVE-2024-30727 is rejected/not used; does not represent an active vulnerability entry.

6.7AI score
SaveExploits0
CVE
CVE
added 2024/04/10 12:00 a.m.95 views

CVE-2024-29445

This CVE entry is rejected and not used; it does not represent an active vulnerability entry.

6.7AI score
SaveExploits0
CVE
CVE
added 2024/04/09 12:00 a.m.7781 views

CVE-2024-30697

CVE-2024-30697 entry is rejected/not used and does not represent an active vulnerability.

6.7AI score
SaveExploits0
CVE
CVE
added 2024/04/09 12:00 a.m.7335 views

CVE-2024-30678

CVE-2024-30678 is rejected/not used and does not represent an active vulnerability entry.

6.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.11 views

PT-2024-23576 · Unknown · Ros2 Galactic Geochelone

Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions 2 Description: An issue was discovered where the system transmits messages in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack. Recommendations: For ROS2 Galactic...

6.8AI score
SaveExploits0References2
OSV
OSV
added 2024/04/08 3:15 a.m.8 views

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

7.5CVSS5.9AI score0.00343EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/08 3:15 a.m.29 views

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

7.5CVSS6.4AI score0.00343EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/08 2:21 a.m.21 views

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

6.8AI score0.00343EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/08 2:21 a.m.29 views

CVE-2023-52341

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed...

6.6AI score0.00343EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/08 2:21 a.m.83 views

CVE-2023-52341

Technical details (affected products, versions, root cause, impact, and mitigation) are not publicly provided in the supplied documents. Monitor for updates.

7.5CVSS6.6AI score0.00343EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder