https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:53:19 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08809 bdu:2024-08809 https://cve.radiocsirt.org/vuln/bdu:2024-08809 https://cve.radiocsirt.org/vuln/euvd-2026-192887 EUVD-2026-192887 https://cve.radiocsirt.org/vuln/euvd-2026-192887 https://cve.radiocsirt.org/vuln/fkie_cve-2024-41588 <p>The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function.</p> <p>The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-41588 https://cve.radiocsirt.org/vuln/ghsa-5qpr-f47p-f6ch <p>The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function.</p> <p>The CGI endpoints v2x00.cgi and cgiwcg.cgi of DrayTek Vigor3910 devices through 4.3.2.6 are vulnerable to buffer overflows, by authenticated users, because of missing bounds checking on parameters passed through POST requests to the strncpy function.</p> https://cve.radiocsirt.org/vuln/ghsa-5qpr-f47p-f6ch https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3086 <p>Ein Angreifer kann mehrere Schwachstellen in DrayTek Vigor Routern ausnutzen, um beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in DrayTek Vigor Routern ausnutzen, um beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu erzeugen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3086