Lucene search
+L

719 matches found

BDU FSTEC
BDU FSTEC
•added 2024/12/23 12:00 a.m.•15 views

The vulnerability in the mainfunction.cgii web interface of DrayTek Vigor software allows a hacker to execute arbitrary code.

The vulnerability in the mainfunction.cgii web interface of the DrayTek Vigor router software system involves the use of uncontrolled format strings. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS8.1AI score0.03524EPSS
SaveExploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/12/23 12:00 a.m.•19 views

The vulnerability of the chglog.cgi web interface of the DrayTek Vigor router software allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the chglog.cgi web interface of the DrayTek Vigor router software lies in the buffer overflow that occurs during the processing of the CGIbyFieldName parameter. Exploiting this vulnerability allows an attacker to trigger a Denial-of-Service attack from a remote location...

7.8CVSS5.8AI score0.00523EPSS
SaveExploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
•added 2024/12/23 12:00 a.m.•14 views

The vulnerability of the web interface of DrayTek Vigor microprogramming software-enabled routers allows a hacker to execute a CSRF attack.

The vulnerability of the web interface of DrayTek Vigor microprogramming software lies in the possibility of inter-site requests being forged. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

7.8CVSS6.7AI score0.00508EPSS
SaveExploits0References4Affected Software25
BDU FSTEC
BDU FSTEC
•added 2024/12/23 12:00 a.m.•17 views

The vulnerability in the mainfunction.cgii web interface of the DrayTek Vigor router software allows a hacker to inject any command they desire.

The vulnerability in the mainfunction.cgii web interface of the DrayTek Vigor router software exists due to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands remotely...

10CVSS7.9AI score0.02931EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/11/29 12:00 a.m.•23 views

The vulnerability of the doPPPo function in the mainfunction.cgi script of the DrayTek Vigor 3900 router software allows a hacker to execute arbitrary commands.

The vulnerability of the doPPPo function in the mainfunction.cgi script of the DrayTek Vigor 3900 router software exists due to the failure to eliminate special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.00807EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/19 12:00 a.m.•11 views

The vulnerability of the doOpenVPN() function in the mainfunction.cgi script of the DrayTek Vigor 3900, Vigor 2960, and Vigor 300B routers allows a hacker to execute arbitrary commands.

The vulnerability of the doOpenVPN function in the mainfunction.cgi script of the DrayTek Vigor 3900, Vigor 2960, and Vigor 300B routers is related to the failure to eliminate the and & elements used in the operating system’s command when processing the action parameter. Exploiting this...

8CVSS5.9AI score0.02141EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/11/19 12:00 a.m.•16 views

The vulnerability of the set_ap_map_config() function in the mainfunction.cgi script of the DrayTek Vigor 3900, Vigor 2960, and Vigor 300B router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the setapmapconfig function in the mainfunction.cgi script of the DrayTek Vigor 3900, Vigor 2960, and Vigor 300B routers relates to the failure to eliminate the and & elements used in the operating system’s command when processing the action parameter. Exploiting this...

8CVSS5.9AI score0.02141EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•23 views

The vulnerability of the doIPSec function in the mainfunction.cgi file of the DrayTek Vigor 3900 router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the doIPSec function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the failure to address the elimination of certain special elements used in the operating system command. Exploiting this vulnerability allows a remote...

9CVSS5.9AI score0.00807EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•17 views

The vulnerability of the rename_table function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the renametable function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker ...

9CVSS5.9AI score0.0081EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•21 views

The vulnerability of the “restore” function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the “restore” function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...

10CVSS5.9AI score0.00815EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•18 views

The vulnerability in the modifyrow function of the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the modifyrow function in the mainfunction.cgi file of the DrayTek Vigor 3900 router microprogramming system exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a remote attacker to...

9CVSS5.9AI score0.00807EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/07 12:00 a.m.•17 views

The vulnerability of the web interface of DrayTek Vigor microprogramming software allows attackers to carry out cross-site scripting attacks.

The vulnerability of the web interface of DrayTek Vigor microprogramming software routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.5AI score0.00272EPSS
SaveExploits0References5Affected Software24
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•22 views

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to perform a command injection attack...

8CVSS7.3AI score0.0164EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•18 views

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to perform a command injection attack...

8CVSS7.3AI score0.02141EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•16 views

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to perform a command injection attack...

8CVSS7.3AI score0.02141EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•15 views

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high-performance router for enterprise networks from China DrayTek DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to perform a command injection attack...

8CVSS7.4AI score0.02141EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•20 views

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to perform a command injection attack...

8CVSS7.3AI score0.02034EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•14 views

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to perform a command injection attack...

8CVSS7.4AI score0.01558EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•15 views

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to perform a command injection attack...

8CVSS7.3AI score0.01329EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/04 12:00 a.m.•18 views

DrayTek Vigor 3900 安全漏洞

DrayTek Vigor 3900 is a high performance router for enterprise networks from China DrayTek. A security vulnerability exists in the DrayTek Vigor 3900 version 1.5.1.3. An attacker can exploit this vulnerability to inject malicious commands into mainfunction.cgi and execute arbitrary commands by...

8CVSS7.3AI score0.00688EPSS
SaveExploits0References1
Rows per page
Query Builder