Lucene search

K

11 matches found

CVE
CVE
added 2019/11/18 6:15 p.m.89 views

CVE-2019-5101

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by pe...

5.9CVSS5.9AI score0.00215EPSS
CVE
CVE
added 2019/11/18 6:15 p.m.76 views

CVE-2019-5102

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1. When connecting to a remote server, the server's SSL certificate is checked but no action is taken when the certificate is invalid. An attacker could exploit this behavior by pe...

5.9CVSS5.8AI score0.00215EPSS
CVE
CVE
added 2020/03/16 9:15 p.m.71 views

CVE-2020-7248

libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow.

7.5CVSS7.7AI score0.01111EPSS
CVE
CVE
added 2020/03/16 10:15 p.m.70 views

CVE-2020-7982

An issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A bug in the fork of the opkg package manager before 2020-01-25 prevents correct parsing of embedded checksums in the signed repository index, allowing a man-in-the-middle attacker to inject arbitrary pa...

8.1CVSS7.9AI score0.02911EPSS
CVE
CVE
added 2021/02/07 11:15 p.m.63 views

CVE-2021-22161

In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix an...

6.5CVSS6.3AI score0.00107EPSS
CVE
CVE
added 2020/03/16 6:15 p.m.59 views

CVE-2019-19945

uhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error. This leads to out-of-bounds access to a heap buffer and a subsequent crash. It can be triggered with an HTTP POST request to a CGI script, specifying both "Transfer-Encoding: chunked" and a large negativ...

7.5CVSS7.5AI score0.00975EPSS
CVE
CVE
added 2022/09/19 5:15 p.m.52 views

CVE-2022-38333

Openwrt before v21.02.3 and Openwrt v22.03.0-rc6 were discovered to contain two skip loops in the function header_value(). This vulnerability allows attackers to access sensitive information via a crafted HTTP request.

7.5CVSS7.3AI score0.00193EPSS
CVE
CVE
added 2020/11/19 7:15 p.m.47 views

CVE-2020-28951

libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.

10CVSS9.4AI score0.00518EPSS
CVE
CVE
added 2018/11/28 10:29 a.m.41 views

CVE-2018-19630

cgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has unauthenticated reflected XSS via the URI, as demonstrated by a cgi-bin/?[XSS] URI.

6.1CVSS6AI score0.00326EPSS
CVE
CVE
added 2021/08/02 9:15 p.m.40 views

CVE-2021-32019

There is missing input validation of host names displayed in OpenWrt before 19.07.8. The Connection Status page of the luci web-interface allows XSS, which can be used to gain full control over the affected system via ICMP.

6.1CVSS6.6AI score0.00216EPSS
CVE
CVE
added 2021/01/26 6:15 p.m.35 views

CVE-2019-25015

LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID.

5.4CVSS5.1AI score0.00343EPSS