1687 matches found
CVE-2019-16534
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
CVE-2019-16533
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
Design/Logic Flaw
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
Information disclosure
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
CVE-2019-16534
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
CVE-2019-16534
CVE-2019-16534 affects DrayTek Vigor2925 devices running firmware 3.8.4.3, where an XSS flaw can be triggered by a crafted WAN name on the General Setup screen. The vulnerability is tied to an end-of-life product. The provided sources describe the existence of the XSS but do not specify the under...
CVE-2019-16533
The CVE-2019-16533 entry concerns DrayTek Vigor2925 devices with firmware 3.8.4.3. The flaw is an Incorrect Access Control in loginset.htm that can be triggered to perform Cross-Site Scripting (XSS). Affected product is explicitly named, and the default vulnerability description is consistent acr...
CVE-2019-16533
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
DrayTek routers cross-site request forgery vulnerability
DrayTek routers are router products from DrayTek Taiwan, China. A cross-site request forgery vulnerability exists in versions of DrayTek routers prior to 2018-05-23. A remote attacker could exploit the vulnerability to change DNS or DHCP settings...
CVE-2018-20872
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649...
CVE-2018-20872
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649...
Cross site request forgery (csrf)
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649...
CVE-2018-20872
CVE-2018-20872 concerns DrayTek routers (pre-2018-05-23) where a cross-site request forgery (CSRF) vulnerability in the router web interface allows an attacker to change DNS or DHCP settings. The description across sources consistently links this to a related issue (CVE-2017-11649). The provided ...
CVE-2018-20872
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649...
VulnCheck KEV: CVE-2018-20872
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649...
Draytek VigorACS Detection
Detection of Draytek VigorACS. The script sends a connection request to the server and attempts to detect Draytek VigorACS and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respecti...
Vigor ACS Unsafe Flex AMF Java Object Deserialization(CVE-2017-5641)
Vulnerability Summary A vulnerability in Vigor ACS allows unauthenticated users to cause the product to execute arbitrary code. VigorACS 2 “is a powerful centralized management software for Vigor Routers and VigorAPs, it is an integrated solution for configuring, monitoring, and maintenance of...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp...
CVE-2017-11649
Cross-site request forgery CSRF vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp...
Cross site scripting
Cross-site scripting XSS vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp...