Lucene search
+L

719 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•5 views

CVE-2026-3040: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin/mainfunction.cgi/uploadlangs of the component Web Management Interface. The manipulation of the argument File leads to os command injection. The attack may be initiated...

7.2CVSS5.2AI score0.07168EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/23 12:00 a.m.•31 views

DrayTek Vigor 300B 操作系统命令注入漏洞

The DrayTek Vigor 300B is a Quad-WAN load balancing broadband router operated on Linux systems by DrayTek Corporation. Versions of the DrayTek Vigor 300B prior to 1.5.1.6 contained an operating system command injection vulnerability. This vulnerability stemmed from improper handling of parameters...

7.2CVSS5.8AI score0.07168EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2026/01/09 9:51 a.m.•15 views

CVE-2020-10823

A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request issue 1 of 3...

9.8CVSS8.1AI score0.04425EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:33 a.m.•23 views

CVE-2024-41339

An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigo...

8.8CVSS7.3AI score0.00646EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/27 12:00 a.m.•20 views

The vulnerability of the HTTP CGI Request Handler component in DrayTek Vigor microprogramming software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the HTTP CGI Request Handler component in DrayTek Vigor microprogramming software is related to the absence of variable initialization. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code...

8.8CVSS6.3AI score0.00577EPSS
SaveExploits0References3Affected Software32
RedhatCVE
RedhatCVE
•added 2025/10/07 5:35 p.m.•16 views

CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

8.8CVSS6.9AI score0.00577EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2017-3261

Malware in sbrugna...

8.8CVSS7AI score0.0069EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•22 views

EUVD-2020-3231

Malware in sbrugna...

9.8CVSS9.3AI score0.04082EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-23445

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.01769EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2023-23301

Malicious code in bioql PyPI...

6.5CVSS6.2AI score0.15687EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-41883

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-41884

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-41901

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00424EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-41891

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.0045EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-41887

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-41878

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-41907

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00424EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-41874

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-41894

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.0045EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-41873

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00523EPSS
SaveExploits0References1
Rows per page
Query Builder