Skip to content

Browse Docs Sources Guide

Search/ Get API key

Every CVE
Vendors
Buffalo

Buffalo vulnerabilities

Products

Show 93 moreShow less

Newest

buffalo open xdmod, ubccr xdmod +1 more Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise CVE-2026-45779 9.3 CriticalJune 5, 2026
buffalo open xdmod, ubccr xdmod +1 more Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset CVE-2026-45778 8.6 HighJune 5, 2026
buffalo open xdmod, ubccr xdmod +1 more Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection CVE-2026-45777 9.3 CriticalJune 5, 2026
buffalo open xdmod, ubccr xdmod +1 more Open XDMoD has Broken Access Control via Client-Controlled Session Variable CVE-2026-45776 5.3 MediumJune 5, 2026
buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may... CVE-2026-33366 6.9 MediumMarch 27, 2026
buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker... CVE-2026-33280 8.6 HighMarch 27, 2026
buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker... CVE-2026-32678 8.7 HighMarch 27, 2026
buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more Code injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is... CVE-2026-32669 8.7 HighMarch 27, 2026
buffalo inc. wi-fi router products, buffalo fs-m1266 firmware, fs-s1266 firmware +44 more +46 more OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability... CVE-2026-27650 8.6 HighMarch 27, 2026
buffalo terastation nas ts5400r, buffaloamericas terastation nas ts5400r firmware +1 more Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure CVE-2026-29516 6.9 MediumMarch 16, 2026
buffalo wcr-1166ds firmware, wsr-1166dhp2 firmware, wsr-1166dhp firmware +12 more +14 more OS command injection vulnerability in BUFFALO wireless LAN routers allows a logged-in user to... CVE-2024-26023 4.2 MediumApril 15, 2024
buffalo a2533dhp2, wsr-2533dhp2 firmware, wsr-2533dhp firmware +6 more +8 more Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a... CVE-2024-23486 9.8 CriticalApril 15, 2024
buffalo ls210d firmware Command injection in the ping utility on Buffalo LS210D 1.78-0.03 allows a remote authenticated... CVE-2023-49038 7.2 HighJanuary 29, 2024
buffalo ls210d firmware An issue in Buffalo LS210D v.1.78-0.03 allows a remote attacker to execute arbitrary code via the... CVE-2023-51073 Public exploit 8.1 HighJanuary 11, 2024
buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 more VR-S1000 firmware Ver. 2.37 and earlier allows a network-adjacent unauthenticated attacker who... CVE-2023-51363 6.5 MediumDecember 26, 2023
buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 more VR-S1000 firmware Ver. 2.37 and earlier uses a hard-coded cryptographic key which may allow an... CVE-2023-46711 4.6 MediumDecember 26, 2023
buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 more Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability... CVE-2023-46681 7.8 HighDecember 26, 2023
buffalo vr-s1000 firmware, buffalo inc. vr-s1000 +1 more VR-S1000 firmware Ver. 2.37 and earlier allows an attacker with access to the product's web... CVE-2023-45741 6.8 MediumDecember 26, 2023
buffalo america inc terastation nas ts5410r, buffalo terastation nas 5410r firmware +1 more An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote... CVE-2023-39620 7.5 HighSeptember 8, 2023
buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +14 more +16 more Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to... CVE-2023-26588 7.5 HighApril 11, 2023
buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +10 more +12 more Improper access control vulnerability in Buffalo network devices allows a network-adjacent... CVE-2023-24544 8.1 HighApril 11, 2023
buffalo bs-gs2008 firmware, bs-gs2008p firmware, bs-gs2016 firmware +5 more +7 more Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with... CVE-2023-24464 5.4 MediumApril 11, 2023
buffalo wsr-3200ax4s firmware, buffalo inc. wsr-3200ax4s, buffalo wcr-1166ds firmware +26 more +28 more Hidden functionality vulnerability in Buffalo network devices WSR-3200AX4S firmware Ver. 1.26 and... CVE-2022-43486 6.8 MediumDecember 19, 2022
buffalo wsr-3200ax4b firmware, wsr-3200ax4s firmware, buffalo inc. wsr-3200ax4b +20 more +22 more Buffalo network devices WSR-3200AX4S firmware Ver. 1.26 and earlier, WSR-3200AX4B firmware Ver. 1... CVE-2022-43466 6.8 MediumDecember 19, 2022
buffalo wsr-3200ax4b firmware, wsr-3200ax4s firmware, buffalo inc. wsr-3200ax4b +25 more +27 more Buffalo network devices WSR-3200AX4S firmware Ver. 1.26 and earlier, WSR-3200AX4B firmware Ver. 1... CVE-2022-43443 8.8 HighDecember 19, 2022
buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, dwr-pg firmware +73 more +75 more Authentication bypass vulnerability in multiple Buffalo network devices allows a network-adjacent... CVE-2022-40966 8.8 HighDecember 7, 2022
buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, dwr-pg firmware +52 more +54 more Hidden functionality vulnerability in multiple Buffalo network devices allows a network-adjacent... CVE-2022-39044 6.8 MediumDecember 7, 2022
buffalo hw-450hp-zwe firmware, wzr-300hp firmware, wzr-450hp-cwt firmware +7 more +9 more Use of hard-coded credentials vulnerability in multiple Buffalo network devices allows a network... CVE-2022-34840 6.5 MediumDecember 7, 2022
buffalo wsr-1166dhp3 firmware, wsr-1166dhp4 firmware, buffalo inc. wsr-1166dhp3 and wsr-1166dhp4 +2 more WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an... CVE-2021-20731 8.8 HighJune 9, 2021
buffalo wsr-1166dhp3 firmware, wsr-1166dhp4 firmware, buffalo inc. wsr-1166dhp3 and wsr-1166dhp4 +2 more Improper access control vulnerability in WSR-1166DHP3 firmware Ver.1.16 and prior and WSR... CVE-2021-20730 4.3 MediumJune 9, 2021
buffalo wsr-2533dhp3-bk firmware, wsr-2533dhpl2-bk firmware +1 more The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware... CVE-2021-20092 7.5 HighApril 29, 2021
buffalo wsr-2533dhp3-bk firmware, wsr-2533dhpl2-bk firmware +1 more The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware... CVE-2021-20091 8.8 HighApril 29, 2021
arcadyan buffalo firmware, buffalo wsr-2533dhp3-bk firmware, wsr-2533dhpl2-bk firmware +2 more A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <=... CVE-2021-20090 In KEV EPSS 100.0% 9.8 CriticalApril 29, 2021
buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, fs-600dhp firmware +22 more +24 more Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99... CVE-2021-3512 8.8 HighApril 28, 2021
buffalo bhr-4grv firmware, dwr-hp-g300nh firmware, fs-600dhp firmware +22 more +24 more Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband... CVE-2021-3511 4.3 MediumApril 28, 2021
buffalo bhr-4rv firmware, fs-g54 firmware, wbr-b11 firmware +33 more +35 more Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS... CVE-2021-20716 9.8 CriticalApril 28, 2021
buffalo inc. whr-g54s, buffalo airstation whr-g54s firmware +1 more Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers... CVE-2020-5606 6.1 MediumSeptember 18, 2020
buffalo inc. whr-g54s, buffalo airstation whr-g54s firmware +1 more Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to... CVE-2020-5605 4.3 MediumSeptember 18, 2020
buffalo open xdmod An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover)... CVE-2018-16988 9.8 CriticalMay 2, 2019
buffalo open xdmod An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows... CVE-2018-16961 7.5 HighMay 2, 2019
buffalo open xdmod An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/login.php has Reflected XSS... CVE-2018-16960 6.1 MediumMay 2, 2019
buffalo ts5600d1206 firmware Incorrect access control in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to... CVE-2018-13324 EPSS 23.2% 9.8 CriticalNovember 26, 2018
buffalo ts5600d1206 firmware Cross-site scripting in detail.html in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to... CVE-2018-13323 6.1 MediumNovember 26, 2018
buffalo ts5600d1206 firmware Directory traversal in list_folders method in Buffalo TS5600D1206 version 3.61-0.10 allows... CVE-2018-13322 6.5 MediumNovember 26, 2018
buffalo ts5600d1206 firmware Incorrect access controls in nasapi in Buffalo TS5600D1206 version 3.61-0.10 allow attackers to... CVE-2018-13321 8.8 HighNovember 26, 2018
buffalo ts5600d1206 firmware System Command Injection in network.set_auth_settings in Buffalo TS5600D1206 version 3.70-0.10... CVE-2018-13320 7.2 HighNovember 26, 2018
buffalo ts5600d1206 firmware Incorrect access control in get_portal_info in Buffalo TS5600D1206 version 3.61-0.10 allows... CVE-2018-13319 7.5 HighNovember 26, 2018
buffalo ts5600d1206 firmware System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows... CVE-2018-13318 7.2 HighNovember 26, 2018
buffalo inc. wzr-1750dhp2, buffalo wzr-1750dhp2 firmware +1 more Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via... CVE-2018-0556 8.8 HighApril 9, 2018
buffalo inc. wzr-1750dhp2, buffalo wzr-1750dhp2 firmware +1 more Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute... CVE-2018-0555 7.8 HighApril 9, 2018
Show olderLoading…

Docs Sources Guide Browse Privacy Terms

esc

Pages All vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open