3 results (0.004 seconds)

CVSS: 5.4EPSS: 0%CPEs: 26EXPL: 1

CVE-2020-28968

https://notcve.org/view.php?id=CVE-2020-28968

Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field. Draytek VigorAP 1000C contiene una vulnerabilidad de tipo cross-site scripting (XSS) almacenada en el módulo RADIUS Setting - RADIUS Server Configuration. Esta vulnerabilidad permite a atacantes ejecutar scripts web o HTML arbitrarios por medio de una carga útil diseñada en el campo de entrada username • https://www.vulnerability-lab.com/get_content.php?id=2244 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 1

CVE-2017-11650

https://notcve.org/view.php?id=CVE-2017-11650

Cross-site scripting (XSS) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to inject arbitrary web script or HTML via vectors involving home.asp. Vulnerabilidad de Cross-Site Scripting (XSS) en dispositivos DrayTek Vigor AP910C con firmware 1.2.0_RC3 build r6594 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante vectores relacionados con home.asp. • https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 1

CVE-2017-11649

https://notcve.org/view.php?id=CVE-2017-11649

Cross-site request forgery (CSRF) vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0_RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp. Vulnerabilidad de Cross-Site Request Forgery (CSRF) en dispositivos DrayTek Vigor AP910C con firmware 1.2.0_RC3 build r6594 permite que atacantes remotos secuestren la autenticación de usuarios sin especificar para peticiones que habilitan SNMP en el dispositivo remoto mediante vectores relacionados con goform/setSnmp. • https://iscouncil.blogspot.in/2018/03/dray-tek-vigor-ap910c-multiple.html • CWE-352: Cross-Site Request Forgery (CSRF) •