CVE-2024-46567: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46597

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

The DrayTek Vigor 3910 is a high performance router for enterprise networks from DrayTek. A buffer overflow vulnerability exists in the DrayTek Vigor 3910 v4.3.2.6, which originates from the sPubKey parameter on the dialin.cgi page that fails to properly validate the length of the input data, and...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the saveVPNProfile parameter of the v2x00.cgi page. An attacker can caus...

CVE-2024-46595

The vulnerability CVE-2024-46595 affects DrayTek Vigor 3910 (version 4.3.2.6). A buffer overflow in the saveitem parameter of the lan2lan.cgi page can be triggered by crafted input to cause a Denial of Service. The connected sources confirm the affected product and the impact; no remediation or p...

CVE-2024-46590

CVE-2024-46590 affects DrayTek Vigor 3910, firmware 4.3.2.6, with a buffer overflow in the ssidencrypt%d parameter of the v2x00.cgi endpoint. This leads to a Denial of Service via crafted input. Documents describe the vulnerability consistently across multiple sources, with network-based, low‑com...

CVE-2024-46557: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46568

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46568: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32047

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the iProfileIdx parameter at the "v2x00.cgi" endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input. Recommendations F...

CVE-2024-46589: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46581

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

DrayTek Vigor 3910 安全漏洞

DrayTek Vigor 3910 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3910 version v4.3.2.6 that originates from a buffer overflow issue contained in the sStRtMskShow parameter of the ipstrt.cgi page. An attacker can cause...

CVE-2024-46553: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2024-46560: Buffer Copy without Checking Size of Input

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pubkey parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2024-32061

Name of the Vulnerable Software and Affected Versions Draytek Vigor 3910 version 4.3.2.6 Description A buffer overflow issue was discovered in the ssidencrypt 5g%d parameter at the "v2x00.cgi" API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted input...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2022-3910 1. DirtyCred Exe: t1dpoc./t...

PT-2024-7670 · Draytek · Draytek Vigor 3910

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor3910 devices through 4.3.2.6 Description: The issue is an unauthenticated DOM-based reflected XSS. This occurs due to a lack of protection for the web page structure in the DrayTek Vigor router's web interface firmware...

RHEL 7 / 8 : Red Hat OpenShift Enterprise (RHSA-2023:3910)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3910 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-3910)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3910 advisory. - Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Cou...