openNDS records
14 published records for vendor opennds.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 6
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-476 NULL Pointer Dereference5
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-116 Improper Encoding or Escaping of Output1
- CWE-401 Missing Release of Memory after Effective Lifetime1
- CWE-416 Use After Free1
- CWE-787 Out-of-bounds Write1
The weakness classes this vendor ships most often: where to look.
CWEAll records
14 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2023-41101No exploit | An issue was discovered in the captive portal in OpenNDS before version 10.1.3.opennds · opennds · CWE-787 | Critical9.8 | — | 1.9% | Nov 17, 2023 |
39Monitor | CVE-2023-38319No exploit | An issue was discovered in OpenNDS before 10.1.3.opennds · opennds · CWE-78 | Critical9.8 | — | 1.1% | Jan 26, 2024 |
39Monitor | CVE-2023-38323No exploit | An issue was discovered in OpenNDS before 10.1.3.opennds · opennds · CWE-78 | Critical9.8 | — | 1.1% | Jan 26, 2024 |
39Monitor | CVE-2023-38317No exploit | An issue was discovered in OpenNDS before 10.1.3.opennds · opennds · CWE-78 | Critical9.8 | — | 1.1% | Jan 26, 2024 |
39Monitor | CVE-2023-38318No exploit | An issue was discovered in OpenNDS before 10.1.3.opennds · opennds · CWE-78 | Critical9.8 | — | 1.1% | Jan 26, 2024 |
39Monitor | CVE-2023-38316No exploit | An issue was discovered in OpenNDS Captive Portal before version 10.1.2.opennds · captive portal · CWE-116 | Critical9.8 | — | 1.1% | Nov 17, 2023 |
30Monitor | CVE-2023-38322No exploit | An issue was discovered in OpenNDS Captive Portal before version 10.1.2.opennds · captive portal · CWE-476 | High7.5 | — | 1.0% | Nov 17, 2023 |
30Monitor | CVE-2023-41102No exploit | An issue was discovered in the captive portal in OpenNDS before version 10.1.3.opennds · opennds · CWE-401 | High7.5 | — | 1.0% | Nov 17, 2023 |
30Monitor | CVE-2023-38313No exploit | An issue was discovered in OpenNDS Captive Portal before 10.1.2.opennds · captive portal · CWE-476 | High7.5 | — | 1.0% | Nov 17, 2023 |
30Monitor | CVE-2023-38315No exploit | An issue was discovered in OpenNDS Captive Portal before version 10.1.2.opennds · captive portal · CWE-476 | High7.5 | — | 1.0% | Nov 17, 2023 |
30Monitor | CVE-2023-38320No exploit | An issue was discovered in OpenNDS Captive Portal before version 10.1.2.opennds · captive portal · CWE-476 | High7.5 | — | 1.0% | Nov 17, 2023 |
26Monitor | CVE-2023-38314No exploit | An issue was discovered in OpenNDS Captive Portal before version 10.1.2.opennds · captive portal · CWE-476 | Medium6.5 | — | 0.9% | Nov 17, 2023 |
22Monitor | CVE-2024-25763No exploit | openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.opennds · opennds · CWE-416 | Medium5.5 | — | 0.5% | Feb 26, 2024 |
21Monitor | CVE-2023-38324No exploit | An issue was discovered in OpenNDS before 10.1.2.opennds · captive portal | Medium5.3 | — | 0.7% | Nov 17, 2023 |
- CVE-2023-4110140Plan
An issue was discovered in the captive portal in OpenNDS before version 10.1.3.
CriticalCVSS 9.8No exploitEPSS 2%opennds · openndsNov 17, 2023
- CVE-2023-3831939Monitor
An issue was discovered in OpenNDS before 10.1.3.
CriticalCVSS 9.8No exploitEPSS 1%opennds · openndsJan 26, 2024
- CVE-2023-3832339Monitor
An issue was discovered in OpenNDS before 10.1.3.
CriticalCVSS 9.8No exploitEPSS 1%opennds · openndsJan 26, 2024
- CVE-2023-3831739Monitor
An issue was discovered in OpenNDS before 10.1.3.
CriticalCVSS 9.8No exploitEPSS 1%opennds · openndsJan 26, 2024
- CVE-2023-3831839Monitor
An issue was discovered in OpenNDS before 10.1.3.
CriticalCVSS 9.8No exploitEPSS 1%opennds · openndsJan 26, 2024
- CVE-2023-3831639Monitor
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
CriticalCVSS 9.8No exploitEPSS 1%opennds · captive portalNov 17, 2023
- CVE-2023-3832230Monitor
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
HighCVSS 7.5No exploitEPSS 1%opennds · captive portalNov 17, 2023
- CVE-2023-4110230Monitor
An issue was discovered in the captive portal in OpenNDS before version 10.1.3.
HighCVSS 7.5No exploitEPSS 1%opennds · openndsNov 17, 2023
- CVE-2023-3831330Monitor
An issue was discovered in OpenNDS Captive Portal before 10.1.2.
HighCVSS 7.5No exploitEPSS 1%opennds · captive portalNov 17, 2023
- CVE-2023-3831530Monitor
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
HighCVSS 7.5No exploitEPSS 1%opennds · captive portalNov 17, 2023
- CVE-2023-3832030Monitor
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
HighCVSS 7.5No exploitEPSS 1%opennds · captive portalNov 17, 2023
- CVE-2023-3831426Monitor
An issue was discovered in OpenNDS Captive Portal before version 10.1.2.
MediumCVSS 6.5No exploitEPSS 1%opennds · captive portalNov 17, 2023
- CVE-2024-2576322Monitor
openNDS 10.2.0 is vulnerable to Use-After-Free via /openNDS/src/auth.c.
MediumCVSS 5.5No exploitEPSS 0%opennds · openndsFeb 26, 2024
- CVE-2023-3832421Monitor
An issue was discovered in OpenNDS before 10.1.2.
MediumCVSS 5.3No exploitEPSS 1%opennds · captive portalNov 17, 2023