An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.1

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check

In gnss driver, there is a possible out of bounds read due to an integer overflow

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check

LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkeys.js

OpenWrt 21.02.1 allows XSS via the NAT Rules Name screen

OpenWrt 21.02.1 allows XSS via the Traffic Rules Name screen

OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen

A stored cross-site scripting (XSS) vulnerability was discovered in the Web Interface for OpenWRT LuCI version 19.07 which allows attackers to inject arbitrary Javascript in the…

LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID

OpenWrt 18.06.4 allows XSS via the "New port forward" Name field to the cgi-bin/luci/admin/network/firewall/forwards URI (this can occur, for example, on a TP-Link Archer C7…

OpenWrt 18.06.4 allows XSS via these Name fields to the cgi-bin/luci/admin/network/firewall/rules URI: "Open ports on router" and "New forward rule" and "New Source NAT" (this can…

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In Bluetooth FW, there is a possible reachable assertion due to improper exception handling

In DA, there is a possible permission bypass due to an incorrect status check

OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download

OpenWrt Project jsonpath: Memory leak when processing strings, labels, and regexp tokens

LuCI luci-mod-network: Possible XSS attack in WiFi scan on Joining Wireless Client modal

In aee daemon, there is a possible system crash due to a race condition

In preloader, there is a possible read of device unique identifiers due to a logic error

In wlan STA driver, there is a possible reachable assertion due to improper exception handling

In power, there is a possible out of bounds read due to a missing bounds check

In power, there is a possible out of bounds read due to a missing bounds check

In wlan driver, there is a possible out of bounds read due to improper input validation

In flashc, there is a possible information disclosure due to an uncaught exception

In flashc, there is a possible information disclosure due to an uncaught exception

In flashc, there is a possible information disclosure due to an uncaught exception

In gnss service, there is a possible out of bounds read due to improper input validation

In gnss service, there is a possible out of bounds write due to improper input validation

In power, there is a possible memory corruption due to an incorrect bounds check

In nvram, there is a possible out of bounds write due to a missing bounds check

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check

In da, there is a possible out of bounds read due to a missing bounds check