1715 matches found
Operating System (OS) Detection (PPTP)
PPTP service based Operating System OS detection. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-16534
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
CVE-2019-16533
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
CVE-2019-16534
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
CVE-2019-16533
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
Design/Logic Flaw
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
Information disclosure
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
CVE-2019-16534
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
CVE-2019-16534
CVE-2019-16534 affects DrayTek Vigor2925 devices running firmware 3.8.4.3, where an XSS flaw can be triggered by a crafted WAN name on the General Setup screen. The vulnerability is tied to an end-of-life product. The provided sources describe the existence of the XSS but do not specify the under...
CVE-2019-16533
The CVE-2019-16533 entry concerns DrayTek Vigor2925 devices with firmware 3.8.4.3. The flaw is an Incorrect Access Control in loginset.htm that can be triggered to perform Cross-Site Scripting (XSS). Affected product is explicitly named, and the default vulnerability description is consistent acr...
CVE-2019-16533
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
CVE-2019-16533: Improper Neutralization of Input During Web Page Generation
On DrayTek Vigor2925 devices with firmware 3.8.4.3, Incorrect Access Control exists in loginset.htm, and can be used to trigger XSS. NOTE: this is an end-of-life product...
CVE-2019-16534: Improper Neutralization of Input During Web Page Generation
On DrayTek Vigor2925 devices with firmware 3.8.4.3, XSS exists via a crafted WAN name on the General Setup screen. NOTE: this is an end-of-life product...
DrayTek routers cross-site request forgery vulnerability
DrayTek routers are router products from DrayTek Taiwan, China. A cross-site request forgery vulnerability exists in versions of DrayTek routers prior to 2018-05-23. A remote attacker could exploit the vulnerability to change DNS or DHCP settings...
CVE-2018-20872
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649...
CVE-2018-20872
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649...
Cross site request forgery (csrf)
DrayTek routers before 2018-05-23 allow CSRF attacks to change DNS or DHCP settings, a related issue to CVE-2017-11649...
CVE-2018-20872
CVE-2018-20872 concerns DrayTek routers (pre-2018-05-23) where a cross-site request forgery (CSRF) vulnerability in the router web interface allows an attacker to change DNS or DHCP settings. The description across sources consistently links this to a related issue (CVE-2017-11649). The provided ...