Lucene search
+L

1281 matches found

BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.7 views

The vulnerability of the web interface of DrayTek Vigor microprogramming software-enabled routers allows a hacker to execute a CSRF attack.

The vulnerability of the web interface of DrayTek Vigor microprogramming software lies in the possibility of inter-site requests being forged. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

7.8CVSS6.7AI score0.00508EPSS
SaveExploits0References4Affected Software25
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.8 views

The vulnerability of the sub_1DF14 function in the mainfunction.cgi web interface of the DrayTek Vigor router software allows a hacker to gain unauthorized access to confidential system files.

The vulnerability of the sub1DF14 function in the mainfunction.cgi web interface of the DrayTek Vigor router software is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...

6.8CVSS6.3AI score0.15687EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.7 views

The vulnerability in the mainfunction.cgii web interface of DrayTek Vigor software allows a hacker to execute arbitrary code.

The vulnerability in the mainfunction.cgii web interface of the DrayTek Vigor router software system involves the use of uncontrolled format strings. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS8.1AI score0.03302EPSS
SaveExploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.12 views

The vulnerability of the sub_1225C function in the mainfunction.cgi web interface of the DrayTek Vigor router software allows a hacker to execute arbitrary commands.

The vulnerability of function sub1225C in the mainfunction.cgi web interface of the DrayTek Vigor router software lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.6AI score0.26048EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.7 views

The vulnerability in the inetipv6.cgi web interface of the DrayTek Vigor router software allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability in the SSLapp.cgi web interface of the DrayTek Vigor router software lies in the overflow of buffers on the stack during the processing of the sIpv6AiccuUser parameter. Exploiting this vulnerability allows a remote attacker to trigger a Denial-of-Service attack...

7.8CVSS5.6AI score0.0045EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.7 views

The vulnerability of the `ldap_search_dn` function in the `mainfunction.cgi` script of the DrayTek Vigor router’s web interface allows a hacker to execute arbitrary commands.

The vulnerability of the ldapsearchdn function in the mainfunction.cg script of the DrayTek Vigor router’s web interface is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.00597EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.7 views

The vulnerability of the v2x00.cgi web interface of the DrayTek Vigor router software allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the v2x00.cgi web interface of the DrayTek Vigor router software lies in the buffer overflow that occurs during the processing of the saveVPNProfile parameter. Exploiting this vulnerability allows a malicious actor to trigger a Denial-of-Service attack from a remote location...

7.8CVSS5.8AI score0.0045EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.7 views

The vulnerability of the chglog.cgi web interface of the DrayTek Vigor router software allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the chglog.cgi web interface of the DrayTek Vigor router software lies in the buffer overflow that occurs during the processing of the CGIbyFieldName parameter. Exploiting this vulnerability allows an attacker to trigger a Denial-of-Service attack from a remote location...

7.8CVSS5.8AI score0.00523EPSS
SaveExploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.24 views

The vulnerability in the getSyslogFile function of the mainfunction.cgi web interface of the DrayTek Vigor router software allows a malicious individual to gain unauthorized access to confidential system files.

The vulnerability of the getSyslogFile function in the mainfunction.cgi web interface of the DrayTek Vigor router software is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

6.8CVSS6.6AI score0.01769EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.8 views

The vulnerability in the mainfunction.cgii web interface of DrayTek Vigor software allows a hacker to execute arbitrary code.

The vulnerability in the mainfunction.cgii web interface of the DrayTek Vigor router software exists due to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS8.1AI score0.34845EPSS
SaveExploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.9 views

The vulnerability of the vpn.cgi web interface script of the DrayTek Vigor router software allows a hacker to trigger a service failure.

The vulnerability of the vpn.cgi web interface of the DrayTek Vigor router operating system is related to buffer overflow during the processing of the sPeerId parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

7.8CVSS5.9AI score0.00424EPSS
SaveExploits0References3Affected Software16
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.8 views

The vulnerability in the mainfunction.cgii web interface of the DrayTek Vigor router software allows a hacker to inject any command they desire.

The vulnerability in the mainfunction.cgii web interface of the DrayTek Vigor router software exists due to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands remotely...

10CVSS7.9AI score0.02931EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.23 views

The vulnerability in the SSLapp.cgi web interface of the DrayTek Vigor router software allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability in the SSLapp.cgi web interface of the DrayTek Vigor router software lies in the buffer overflow that occurs during the processing of the sAppName parameter. Exploiting this vulnerability allows an attacker to trigger a Denial-of-Service Attack DoS from a remote location...

7.8CVSS5.8AI score0.00523EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.6 views

The vulnerability of the DownloadFileServlet function in the software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network allows a malicious actor to upload arbitrary files with root privileges.

The vulnerability of the DownloadFileServlet function in the software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network is related to the unlimited download of dangerous types of files. Exploiting this vulnerability could...

10CVSS7.7AI score0.03823EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.11 views

The vulnerability in the Profile Name field of the software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network allows a attacker to perform XSS attacks.

The vulnerability of the Profile Name field in software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability cou...

5.5CVSS5.8AI score0.00551EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.6 views

The vulnerability in the mainfunction.cgi web interface of the DrayTek Vigor router software allows a hacker to execute arbitrary code.

The vulnerability in the mainfunction.cgi web interface of the DrayTek Vigor router software exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8AI score0.05306EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.10 views

The vulnerability in the mainfunction.cgi web interface of the DrayTek Vigor router software allows a hacker to execute arbitrary code.

The vulnerability in the mainfunction.cgi web interface of the DrayTek Vigor router software exists due to the failure to implement measures to neutralize specific elements. Exploiting this vulnerability allows an attacker to execute arbitrary commands during the processing of parameters...

7.8CVSS7.5AI score0.06717EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.7 views

The vulnerability of the web interface of Draytek Vigor routers, Draytek Vigor access points, Draytek Vigor switches, and the cloud platform Draytek Vigor Myvigor arises from the use of rigidly encrypted credentials. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the web interface of Draytek Vigor routers, Draytek Vigor access points, Draytek Vigor switches, and the cloud platform Draytek Vigor Myvigor is related to the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to compromise the...

10CVSS7.7AI score0.00599EPSS
SaveExploits1References2Affected Software72
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.8 views

The vulnerability in the mainfunction.cgii web interface of DrayTek Vigor software allows a hacker to execute arbitrary code.

The vulnerability in the mainfunction.cgii web interface of the DrayTek Vigor router software lies in the issue of buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code during the processing of the formuserphonenumber parameter...

10CVSS8.5AI score0.05328EPSS
SaveExploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.8 views

The vulnerability of the user_login.cgi web interface of the DrayTek Vigor router software allows a hacker to execute arbitrary code.

The vulnerability of the userlogin.cgi web interface of the DrayTek Vigor router software lies in improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.0086EPSS
SaveExploits0References4Affected Software31
Rows per page
Query Builder