Vulnerabilities

Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products.

BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally.

OpenXDMoD is an open framework for collecting and analyzing HPC metrics.

OpenXDMoD is an open framework for collecting and analyzing HPC metrics.

OpenXDMoD is an open framework for collecting and analyzing HPC metrics.

OpenXDMoD is an open framework for collecting and analyzing HPC metrics.

Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.

Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in the execution of arbitrary OS commands.

Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.

Code injection vulnerability exists in BUFFALO Wi-Fi router products.

OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.

Buffalo TeraStation NAS TS5400R firmware version 4.02-0.06 and prior contain an excessive file permissions vulnerability that allows authenticated attackers to read the /etc/shadow file by uploading and executing a PHP f…

Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'.

A path traversal issue exists in WXR9300BE6P series firmware versions prior to Ver.1.10.

NAS Navigator2 Windows version by BUFFALO INC.

OS command injection vulnerability exists in BUFFALO wireless LAN routers and wireless LAN repeaters.

OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to execute arbitrary OS commands.

Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.

Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated attacker to inject arbitrary commands onto the NAS as root.

An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the Firmware Update Script at /etc/init.d/update_notifications.sh.

VR-S1000 firmware Ver.

VR-S1000 firmware Ver.

Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver.

VR-S1000 firmware Ver.

An Issue in Buffalo America, Inc.