Opennds vulnerabilities

Products

• Opennds 11
• Captive Portal 7

Newest

• opennds In openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the... CVE-2026-38822 7.6 HighAugust 28, 2026
• opennds A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an... CVE-2026-38821 7.1 HighAugust 28, 2026
• opennds openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command... CVE-2026-38820 8.3 HighAugust 28, 2026
• opennds Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive... CVE-2026-38819 5.3 MediumAugust 28, 2026
• opennds openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c. CVE-2024-25763 Fix available 5.5 MediumFebruary 26, 2024
• opennds An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the status path script... CVE-2023-38323 Fix available 9.8 CriticalJanuary 26, 2024
• opennds An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the FAS key entry in the... CVE-2023-38319 Fix available 9.8 CriticalJanuary 26, 2024
• opennds An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the gateway FQDN entry in... CVE-2023-38318 Fix available 9.8 CriticalJanuary 26, 2024
• opennds An issue was discovered in OpenNDS before 10.1.3. It fails to sanitize the network interface name... CVE-2023-38317 Fix available 9.8 CriticalJanuary 26, 2024
• opennds An issue was discovered in the captive portal in OpenNDS before version 10.1.3. It has multiple... CVE-2023-41102 Fix available 7.5 HighNovember 17, 2023
• opennds An issue was discovered in the captive portal in OpenNDS before version 10.1.3. get_query in... CVE-2023-41101 Fix available 9.8 CriticalNovember 17, 2023
• opennds captive portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It allows users to skip... CVE-2023-38324 Fix available 5.3 MediumNovember 17, 2023
• opennds captive portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a do_binauth NULL... CVE-2023-38322 Fix available 7.5 HighNovember 17, 2023
• opennds captive portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a... CVE-2023-38320 Fix available 7.5 HighNovember 17, 2023
• opennds captive portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. When the custom unescape... CVE-2023-38316 Fix available 9.8 CriticalNovember 17, 2023
• opennds captive portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a... CVE-2023-38315 Fix available 7.5 HighNovember 17, 2023
• opennds captive portal An issue was discovered in OpenNDS Captive Portal before version 10.1.2. It has a NULL pointer... CVE-2023-38314 Fix available 6.5 MediumNovember 17, 2023
• opennds captive portal An issue was discovered in OpenNDS Captive Portal before 10.1.2. it has a do_binauth NULL pointer... CVE-2023-38313 Fix available 7.5 HighNovember 17, 2023