Lucene search
+L

719 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•13 views

CVE-2026-3040: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6. This affects the function cgiGetFile of the file /cgi-bin/mainfunction.cgi/uploadlangs of the component Web Management Interface. The manipulation of the argument File leads to os command injection. The attack may be initiated...

7.2CVSS5.3AI score0.07324EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/02/23 12:00 a.m.•29 views

PT-2026-21570

Name of the Vulnerable Software and Affected Versions DrayTek Vigor 300B versions up to 1.5.1.6 Description A flaw exists in DrayTek Vigor 300B that allows for operating system command injection. This issue is located within the cgiGetFile function of the /cgi-bin/mainfunction.cgi/uploadlangs fil...

5.8CVSS5.5AI score0.07324EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2026/01/09 9:51 a.m.•17 views

CVE-2020-10823

A stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve code execution via a remote HTTP request issue 1 of 3...

9.8CVSS8.1AI score0.04425EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:33 a.m.•26 views

CVE-2024-41339

An issue in the CGI endpoint used to upload configurations in Draytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860/2925 prior to v3.9.7, Vigor 2862/2926 prior to v3.9.9.4, Vigor 2133/2762/2832 prior to v3.9.8, Vigor 2135/2765/2766 prior to v4.4.5.1, Vigo...

8.8CVSS7.3AI score0.00646EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/27 12:00 a.m.•22 views

HTTP CGI Request Handler Code Execution

The vulnerability of the HTTP CGI Request Handler component in DrayTek Vigor microprogramming software is related to the absence of variable initialization. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code...

8.8CVSS6.3AI score0.00577EPSS
SaveExploits0References3Affected Software32
RedhatCVE
RedhatCVE
•added 2025/10/07 5:35 p.m.•16 views

CVE-2025-10547

An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...

8.8CVSS6.9AI score0.00577EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2020-3231

Malware in sbrugna...

9.8CVSS9.3AI score0.04082EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2017-3261

Malware in sbrugna...

8.8CVSS7AI score0.0069EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-41873

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-41887

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-41880

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-41907

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.00424EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-41874

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-41891

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.0045EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-41896

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.0045EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-41895

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.0045EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-23445

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.01769EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-41894

Malicious code in bioql PyPI...

7.5CVSS5.4AI score0.0045EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•18 views

EUVD-2024-41884

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00523EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•28 views

EUVD-2025-5949

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.00995EPSS
SaveExploits0References3
Rows per page
Query Builder