CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Buffalo WSR-2533DHPL2 and WSR-2533DHP3 Router Path Traversal Authentication Bypass Vulnerability (CVE-2021-20090) Analysis and Mitigation Guide
[Affected Scope] Buffalo WSR-2533DHPL2 (firmware version <= 1.02) and WSR-2533DHP3 (firmware version <= 1.24)
[Impact] Unauthenticated remote attackers can bypass authentication via path traversal to gain full administrative control over the device
[Mitigation] Immediately upgrade to the latest official firmware and disable external WAN-side management access
Ubiquiti AirOS stainfo.cgi Remote Command Injection Vulnerability (CVE-2010-5330) Analysis & Mitigation Guide
[Affected Scope] Ubiquiti AirOS prior to v4.0.1 (802.11 ISP), v5.3.5 (AirMax), v5.4.5 (AirSync), and Nanostation5 devices
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges via a specially crafted HTTP GET request
[Mitigation] Immediately upgrade to the patched firmware versions and restrict external access to the web management interface