Vulnerability index

Browse CVEs

94 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Vigor3900 Firmware HIGH 8.8
CVE-2024-51304

In Draytek Vigor3900 1.5.1.3, attackers can inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ldap_search…

Mitigation only
Fix from $1,950 2024-10-30
Vigor2960 Firmware HIGH 8.0
CVE-2024-48074

An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table …

No fix yet
Fix from $1,950 2024-10-28
Vigor3900 Firmware CRITICAL 9.8
CVE-2024-48153

DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the get_subco…

Mitigation only
Fix from $2,300 2024-10-14
Vigor3900 Firmware HIGH 8.0
CVE-2024-46316

DrayTek Vigor3900 v1.5.1.6 was discovered to contain a command injection vulnerability via the sub_2C920 function at /cgi-bin/mainfunction.cgi. This …

Mitigation only
Fix from $1,950 2024-10-09
Vigor3910 Firmware HIGH 7.5
CVE-2024-46589

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sIpv6AiccuUser parameter at inetipv6.cgi. This vulnerability allows at…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46590

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt%d parameter at v2x00.cgi. This vulnerability allows attack…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46591

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sDnsPro parameter at v2x00.cgi. This vulnerability allows attackers to…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46592

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ssidencrypt_5g%d parameter at v2x00.cgi. This vulnerability allows att…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46593

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers …

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46594

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveVPNProfile parameter at v2x00.cgi. This vulnerability allows attac…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46595

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the saveitem parameter at lan2lan.cgi. This vulnerability allows attackers…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46596

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to ca…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46597

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPubKey parameter at dialin.cgi. This vulnerability allows attackers t…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46598

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iprofileidx parameter at dialin.cgi. This vulnerability allows attacke…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46558

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46559

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attacke…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46560

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the pub_key parameter at v2x00.cgi. This vulnerability allows attackers to…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46561

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the queryret parameter at v2x00.cgi. This vulnerability allows attackers t…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46564

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at fextobj.cgi. This vulnerability allows attac…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46565

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46566

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAppName parameter at sslapp.cgi. This vulnerability allows attackers …

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46567

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the iProfileIdx parameter at v2x00.cgi. This vulnerability allows attacker…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46568

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPeerId parameter at vpn.cgi. This vulnerability allows attackers to c…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46571

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46580

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the fid parameter at v2x00.cgi. This vulnerability allows attackers to cau…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46581

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers …

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46582

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers t…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46583

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. This vulnerability allows attacker…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46584

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the AControlIp1 parameter at acontrol.cgi. This vulnerability allows attac…

Mitigation only
Fix from $1,950 2024-09-18
Vigor3910 Firmware HIGH 7.5
CVE-2024-46585

Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at usergrp.cgi. This vulnerability allows attac…

Mitigation only
Fix from $1,950 2024-09-18