CVSS: 8.0EPSS: 0%CPEs: -EXPL: 0CVE-2024-41586
https://notcve.org/view.php?id=CVE-2024-41586
A stack-based Buffer Overflow vulnerability in DrayTek Vigor310 devices through 4.3.2.6 allows a remote attacker to execute arbitrary code via a long query string to the cgi-bin/ipfedr.cgi component. • https://www.forescout.com/resources/draybreak-draytek-research https://www.forescout.com/resources/draytek14-vulnerabilities • CWE-121: Stack-based Buffer Overflow •
CVSS: -EPSS: 0%CPEs: -EXPL: 0CVE-2024-41593
https://notcve.org/view.php?id=CVE-2024-41593
DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow. • https://www.forescout.com/resources/draybreak-draytek-research https://www.forescout.com/resources/draytek14-vulnerabilities •
CVSS: 9.8EPSS: 0%CPEs: -EXPL: 3CVE-2024-9441 – Linear eMerge e3-Series Forgot Password Command Injection
https://notcve.org/view.php?id=CVE-2024-9441
A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP. • https://github.com/p33d/CVE-2024-9441 https://github.com/adhikara13/CVE-2024-9441 https://ssd-disclosure.com/ssd-advisory-nortek-linear-emerge-e3-pre-auth-rce https://vulncheck.com/advisories/linear-emerge-forgot-password • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 6.5EPSS: 0%CPEs: 29EXPL: 0CVE-2024-20521 – Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities
https://notcve.org/view.php?id=CVE-2024-20521
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. ... A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user. • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv04x_rv32x_vulns-yJ2OSDhV •
CVSS: 6.5EPSS: 0%CPEs: 29EXPL: 0CVE-2024-20520 – Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities
https://notcve.org/view.php?id=CVE-2024-20520
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. ... A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system as the root user. • https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv04x_rv32x_vulns-yJ2OSDhV •