Lucene search
+L

43 matches found

NVD
NVD
•added 2026/03/16 8:16 p.m.•15 views

CVE-2026-29516

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions o...

6.9CVSS0.00618EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/16 7:07 p.m.•5 views

CVE-2026-29516 Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions o...

6.9CVSS5.8AI score0.00618EPSS
SaveExploits0References2
CVE
CVE
•added 2026/03/16 7:07 p.m.•48 views

CVE-2026-29516

Affected product : Buffalo TeraStation NAS TS5400R (firmware 4.02-0.06 and earlier). Vulnerability : excessive file permissions allow an authenticated attacker to read /etc/shadow by uploading and executing a PHP file via the webserver, enabling disclosure of hashed passwords for all accounts inc...

6.9CVSS5.8AI score0.00618EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/03/16 7:07 p.m.•49 views

CVE-2026-29516 Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions o...

6.9CVSS0.00618EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/16 12:00 a.m.•3 views

CVE-2026-29516: Incorrect Permission Assignment for Critical Resource

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP file through the webserver. Attackers can exploit world-readable permissions o...

6.9CVSS5.8AI score0.00618EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/16 12:00 a.m.•19 views

PT-2026-25798

Name of the Vulnerable Software and Affected Versions Buffalo TeraStation NAS TS5400R versions 4.02-0.06 and earlier Description An excessive file permissions issue exists in Buffalo TeraStation NAS TS5400R. Authenticated attackers can read the /etc/shadow file by uploading and executing a PHP fi...

6.9CVSS5.8AI score0.00618EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2026/03/16 12:00 a.m.•23 views

Buffalo TeraStation NAS TS5400R 安全漏洞

The Buffalo TeraStation NAS TS5400R is a rack-mounted network attached storage device from the Japanese company Buffalo. Versions of the Buffalo TeraStation NAS TS5400R between 4.02 and 0.06 and earlier contain security vulnerabilities. These vulnerabilities stem from improper file permission...

6.9CVSS5.8AI score0.00618EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2006-5160

Malware in sbrugna...

7.6CVSS6.4AI score0.01124EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-43328

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00939EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 4:11 a.m.•10 views

CVE-2023-39620

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function...

7.5CVSS6.5AI score0.00939EPSS
SaveExploits1
NVD
NVD
•added 2023/09/08 3:15 a.m.•19 views

CVE-2023-39620

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function...

7.5CVSS7.3AI score0.00939EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/09/08 3:15 a.m.•10 views

CVE-2023-39620

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function...

7.5CVSS5.8AI score0.00939EPSS
SaveExploits1References2
OSV
OSV
•added 2023/09/08 3:15 a.m.•10 views

CVE-2023-39620

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function...

7.5CVSS5.8AI score0.00939EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/08 3:15 a.m.•23 views

Information disclosure

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function...

5CVSS7.3AI score0.00939EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/09/08 12:00 a.m.•13 views

Buffalo TeraStation NAS TS5410R Security Vulnerability

The Buffalo TeraStation NAS TS5410R is a NAS device from Buffalo, Japan. A security vulnerability exists in the Buffalo TeraStation NAS TS5410R versions v.5.00 through v.0.07, which originates from a vulnerability that could allow a remote attacker to gain access to sensitive information via the...

7.5CVSS6.7AI score0.00939EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/08 12:00 a.m.•27 views

CVE-2023-39620

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function...

7.5AI score0.00939EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/08 12:00 a.m.•3 views

CVE-2023-39620: Exposure of Sensitive Information to an Unauthorized Actor

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function...

7.5CVSS7.3AI score0.00939EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/09/08 12:00 a.m.•15 views

CVE-2023-39620

An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account function...

6.5AI score0.00939EPSS
SaveExploits1References1
CVE
CVE
•added 2023/09/08 12:00 a.m.•65 views

CVE-2023-39620

Affected product: Buffalo America, Inc. TeraStation NAS TS5410R (versions 5.00 through 0.07). Vulnerability summary: Remote attacker could obtain sensitive information via the guest account function, causing an information-disclosure issue. Root cause (as reported): Not explicitly detailed in the...

7.5CVSS7.2AI score0.00939EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/07 12:00 a.m.•14 views

PT-2023-27039 · Buffalo America · Terastation Nas Ts5410R

Name of the Vulnerable Software and Affected Versions: Buffalo America, Inc. TeraStation NAS TS5410R versions 5.00 through 0.07 Description: The issue allows a remote attacker to obtain sensitive information via the guest account function. Recommendations: For versions 5.00 through 0.07, consider...

7.5CVSS6.8AI score0.00939EPSS
SaveExploits1References8
Rows per page
Query Builder