Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Multiple DrayTek VigorAP models contain a command injection vulnerability in the tr069TestInform function.Check if you run itEPSS 1.78%Aug 24, 2026
- Critical9.2DrayTek Vigor 2960 firmware versions prior to 1.5.1.4 contain an OS command injection vulnerability in the CGI login handler that allows unauthenticated remote attacke…Check if you run itEPSS 1.43%May 8, 2026
- Low2.0A vulnerability was identified in DrayTek Vigor 300B up to 1.5.1.6.Check if you run itEPSS 7.32%Feb 23, 2026
- UnknownDrayTek vigor2960_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 0.67%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.33%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.03%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.33%Aug 22, 2025
- UnknownDrayTek vigor3900_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.14%Aug 22, 2025
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 5.54%Aug 22, 2025
- Medium6.9DrayTek Vigor Routers OS Command Injection VulnerabilityPatch nowKEVEPSS 98.16%Dec 27, 2024
- UnknownDrayTek vigor2960_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.72%Sep 18, 2024
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 20.88%Jan 12, 2022
- UnknownDrayTek vigor300b_firmware Out-of-bounds WritePatch nowKEVEPSS 20.88%Jan 12, 2022
- UnknownDrayTek vigor300b_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 39.39%Jan 12, 2022
- High7.5Draytek VigorConnect Path Traversal VulnerabilityPatch nowKEVEPSS 96.31%Oct 13, 2021
- High7.5Draytek VigorConnect Path Traversal VulnerabilityPatch nowKEVEPSS 90.23%Oct 13, 2021
- Critical9.8DrayTek Multiple Vigor Routers OS Command Injection VulnerabilityPatch nowKEVEPSS 84.48%Jun 30, 2020
- Critical9.8Multiple DrayTek Vigor Routers Web Management Page VulnerabilityPatch nowKEVEPSS 99.99%Feb 1, 2020
- Unknowni-lan draytekl_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.51%May 18, 2018
21 records · page 1 of 1
PreviousNext