Skip to contentOpenwrt vulnerabilities
Newest
- openwrtOpenWrt 21.02.1 allows XSS via the NAT Rules Name screen.CVE-2021-459065.4 Medium
- openwrtThere is missing input validation of host names displayed in OpenWrt before 19.07.8. The...CVE-2021-320196.1 Medium
- openwrtA stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT...CVE-2021-334255.4 Medium
- openwrt luciThe Web Interface for OpenWRT LuCI version 19.07 and lower has been discovered to have a cross...CVE-2021-278216.1 Medium
- openwrtapplications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07...CVE-2021-289618.8 High
- openwrtIn OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates...CVE-2021-221616.5 Medium
- openwrtLuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID.CVE-2019-250155.4 Medium
- openwrtlibuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when...CVE-2020-289519.8 Critical
- openwrt luci** DISPUTED ** In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list...CVE-2020-10871Disputed5.3 Medium
- openwrt lede, openwrt +1 moreAn issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A...CVE-2020-79828.1 High
- openwrtlibubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON...CVE-2020-72487.5 High
- openwrtuhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error....CVE-2019-19945Public exploit7.5 High
- openwrtOpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules...CVE-2019-189925.4 Medium
- openwrtOpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin...CVE-2019-189935.4 Medium
- openwrtAn exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt,...CVE-2019-51024.0 Medium
- openwrtAn exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt,...CVE-2019-51014.0 Medium
- openwrtOpenWRT firmware version 18.06.4 is vulnerable to CSRF via wireless/radio0.network1, wireless...CVE-2019-173678.8 High
- openwrt libuci, motorola c1 mwr03 firmware, cx2l mwr04l firmware +2 moreAn issue was discovered in OpenWrt libuci (aka Library for the Unified Configuration Interface)...CVE-2019-155137.5 High
- openwrt luciIn OpenWrt LuCI through 0.10, the endpoints admin/status/realtime/bandwidth_status and admin...CVE-2019-12272Public exploit9.8 Critical
- openwrt lede, openwrt +1 morecgi_handle_request in uhttpd in OpenWrt through 18.06.1 and LEDE through 17.01 has...CVE-2018-196306.1 Medium
- openwrt** DISPUTED ** OpenWrt mishandles access control in /etc/config/rpcd and the /usr/share/rpcd/acl...CVE-2018-11116Disputed8.8 High