Lucene search
+L

65 matches found

NVD
NVD
added 2023/10/17 1:15 p.m.40 views

CVE-2022-3761

OpenVPN Connect versions before 3.4.0.4506 macOS and OpenVPN Connect before 3.4.0.3100 Windows allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials...

5.9CVSS5.7AI score0.00842EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/10/17 12:10 p.m.41 views

CVE-2022-3761

OpenVPN Connect versions before 3.4.0.4506 macOS and OpenVPN Connect before 3.4.0.3100 Windows allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials...

5.9AI score0.00842EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/17 12:00 a.m.13 views

OpenVPN Connect Trust Management Issues Vulnerabilities

OpenVPN Connect is a VPN Virtual Private Network client application from US-based OpenVPN. A security vulnerability exists in OpenVPN Connect prior to 3.4.0.4506 macOS, OpenVPN Connect prior to 3.4.0.3100 Windows, which originates from a vulnerability that could allow a man-in-the-middle attacker...

5.9CVSS6.6AI score0.00842EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/10/17 12:00 a.m.12 views

PT-2023-6378 · Openvpn · Openvpn Connect

Name of the Vulnerable Software and Affected Versions: OpenVPN Connect versions before 3.4.0.4506 macOS OpenVPN Connect versions before 3.4.0.3100 Windows Description: The issue is related to errors in the certificate authentication procedure, allowing a remote attacker to perform a...

5.9CVSS5.7AI score0.00842EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:57 a.m.6 views

SUSE CVE-2020-15075

OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp...

7.1CVSS7AI score0.00289EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/10/22 12:00 a.m.13 views

OpenVPN Connect Installed (Windows)

Binary data openvpnconnectwininstalled.nbin...

7.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:00 a.m.10 views

The vulnerability of the OpenVPN Connect software lies in its shortcomings regarding system library calls. This allows a hacker to execute arbitrary code with the same level of privileges as the main OpenVPN process.

The vulnerability of the OpenVPN Connect software is related to deficiencies in the mechanism for calling system libraries. Exploiting this vulnerability allows an attacker to execute arbitrary code with the same level of privileges as the main OpenVPN process, using the OpenSSL configuration fil...

7.8CVSS7.6AI score0.00773EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/07/06 12:00 a.m.34 views

Unspecified Vulnerability in OpenVPN Connect

Openvpn OpenVPN Connect is a VPN Virtual Private Network client application from the American company OpenVPN Openvpn. A security vulnerability exists in OpenVPNConnect 3.2.0 through 3.3.0 that allows a local user to load arbitrary dynamically loadable libraries if present via an OpenSSL...

7.8CVSS6.7AI score0.00773EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/02 1:15 p.m.7 views

CVE-2021-3613

OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process OpenVPNConnect.exe...

7.8CVSS7.3AI score0.00773EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/07/02 1:15 p.m.5 views

CVE-2021-3613

OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process OpenVPNConnect.exe...

7.8CVSS5.7AI score0.00773EPSS
SaveExploits0References2
CVE
CVE
added 2021/07/02 12:33 p.m.2970 views

CVE-2021-3613

CVE-2021-3613 affects OpenVPN Connect for Windows (versions 3.2.0–3.3.0). A local user can load arbitrary dynamic loadable libraries via an OpenSSL configuration file, enabling arbitrary code execution with the same privileges as OpenVPNConnect.exe. Public sources confirm the affected range and i...

7.8CVSS7.6AI score0.00773EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/07/02 12:00 a.m.11 views

OpenVPN Connect代码问题漏洞

Openvpn OpenVPN Connect is a VPN Virtual Private Network client application from the American company OpenVPN Openvpn. A security vulnerability exists in OpenVPNConnect 3.2.0 through 3.3.0 that allows a local user to load arbitrary dynamically loadable libraries if present via an OpenSSL...

7.8CVSS5.8AI score0.00773EPSS
SaveExploits0References2
CNVD
CNVD
added 2021/04/16 12:00 a.m.12 views

OpenVPN Connect Backlink Vulnerability

OpenVPN Connect is a VPN Virtual Private Network client application from the American company OpenVPN Openvpn. A backlink vulnerability exists in OpenVPN Connect installer for macOS 3.2.6 and earlier versions, which stems from the fact that the installer can corrupt critical system files. No...

7.1CVSS6.7AI score0.00289EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/30 2:15 p.m.8 views

CVE-2020-15075

OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp...

7.1CVSS7.1AI score0.00289EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/03/30 2:15 p.m.6 views

CVE-2020-15075

OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp...

7.1CVSS7.1AI score0.00289EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/03/30 12:00 a.m.11 views

OpenVPN Connect 后置链接漏洞

OpenVPN Connect is a VPN Virtual Private Network client application from the American company OpenVPN Openvpn. A backlink vulnerability exists in OpenVPN Connect installer for macOS 3.2.6 and earlier versions, which stems from the fact that the installer can corrupt critical system files. No...

7.1CVSS5.6AI score0.00289EPSS
SaveExploits0References2
OSV
OSV
added 2020/02/28 2:15 p.m.10 views

CVE-2020-9442

OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there...

7.8CVSS7.1AI score0.00642EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2020/02/28 2:15 p.m.32 views

CVE-2020-9442

OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there...

7.8CVSS7.2AI score0.00642EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/02/28 1:40 p.m.30 views

CVE-2020-9442

OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dll there...

7.7AI score0.00642EPSS
SaveExploits1References1
hackapp
hackapp
added 2016/04/01 8:54 a.m.21 views

OpenVPN Connect - Customized SSL, KeyStore usage, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application OpenVPN Connect published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder