| CVE-2024-41596 |
Buffer Overflow vulnerabilities exist in DrayTek Vigor310 devices through 4.3.2.6 (in the Vigor management UI) because…
|
8.0
High
|
Oct 3, 2024 |
| CVE-2024-41586 |
A stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through 4.3.2.6 allows a remote attacker to…
|
8.0
High
|
Oct 3, 2024 |
| CVE-2024-41595 |
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via…
|
8.0
High
|
Oct 3, 2024 |
| CVE-2024-41585 |
DrayTek Vigor3910 devices through 4.3.2.6 are affected by an OS command injection vulnerability that allows an…
|
6.8
Medium
|
Oct 3, 2024 |
| CVE-2024-41584 |
DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to reflected XSS by authenticated users, caused by missing…
|
4.7
Medium
|
Oct 3, 2024 |
| CVE-2024-41583 |
DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to stored Cross Site Scripting (XSS) by authenticated users due…
|
4.7
Medium
|
Oct 3, 2024 |
| CVE-2024-41592 |
DrayTek Vigor3910 devices through 4.3.2.6 have a stack-based overflow when processing query string parameters because…
|
8.0
High
|
Oct 3, 2024 |
| CVE-2024-41590 |
Several CGI endpoints are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking…
|
8.0
High
|
Oct 3, 2024 |
| CVE-2024-41589 |
DrayTek Vigor310 devices through 4.3.2.6 use unencrypted HTTP for authentication requests
|
8.8
High
|
Oct 3, 2024 |
| CVE-2024-41588 |
The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer…
|
8.0
High
|
Oct 3, 2024 |
| CVE-2024-23721 |
A Directory Traversal issue was discovered in process_post on Draytek Vigor3910 4.3.2.5 devices
|
7.5
High
|
Mar 20, 2024 |