Lucene search
+L

3120 matches found

osv_clsa
osv_clsa
•added 2022/04/05 3:23 p.m.•22 views

CLSA-2022-1649172186 Update of openvpn-devel, openvpn

Rebuilt for tuxcare.els...

5.8AI score
SaveExploits0References1
osv_clsa
osv_clsa
•added 2022/04/05 3:21 p.m.•16 views

CLSA-2022-1649172110 Update of openvpn-devel, openvpn

Rebuilt for tuxcare.els...

5.8AI score
SaveExploits0References1
osv_clsa
osv_clsa
•added 2022/04/05 3:01 p.m.•23 views

CLSA-2022-1649170882 Fixed CVE-2022-0547 in openvpn

CVE-2022-0547: Fix authentication bypass via multiple deferred authentication plug-ins...

9.8CVSS6.9AI score0.03574EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2022/04/05 2:56 p.m.•24 views

CLSA-2022-1649170601 Fix CVE(s): CVE-2022-0547

SECURITY UPDATE: authentication bypass via multiple deferred authentication plug-ins - debian/patches/CVE-2022-0547.patch: disallow multiple deferred authentication plug-ins in doc/openvpn.8, src/openvpn/plugin.c. - CVE-2022-0547...

9.8CVSS6.9AI score0.03574EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/03/31 8:15 a.m.•21 views

CVE-2022-24299

Improper input validation vulnerability in pfSense CE and pfSense Plus pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01 allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command...

8.8CVSS7.3AI score0.01932EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/31 8:15 a.m.•28 views

CVE-2022-24299

Improper input validation vulnerability in pfSense CE and pfSense Plus pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01 allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command...

8.8CVSS0.01932EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/03/31 8:15 a.m.•14 views

CVE-2022-24299

Improper input validation vulnerability in pfSense CE and pfSense Plus pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01 allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command...

8.8CVSS7.4AI score0.01932EPSS
SaveExploits0References3
CVE
CVE
•added 2022/03/31 7:21 a.m.•128 views

CVE-2022-24299

The CVE-2022-24299 issue affects pfSense CE (versions prior to 2.6.0) and pfSense Plus (prior to 22.01); it is an Improper Input Validation vulnerability that lets a privileged attacker who can modify OpenVPN client/server settings execute arbitrary commands. This is documented across multiple so...

8.8CVSS8.7AI score0.01932EPSS
SaveExploits0References2Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/31 12:00 a.m.•7 views

CVE-2022-24299: Improper Input Validation

Improper input validation vulnerability in pfSense CE and pfSense Plus pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01 allows a remote attacker with the privilege to change OpenVPN client or server settings to execute an arbitrary command...

8.8CVSS7.7AI score0.01932EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/03/31 12:00 a.m.•33 views

Mageia: Security Advisory (MGASA-2022-0123)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.03574EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2022/03/31 12:00 a.m.•14 views

OpenVPN Authentication Bypass

The vulnerability of OpenVPN software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to confidential information...

4.8CVSS7AI score0.03574EPSS
SaveExploits0References17Affected Software6
osv_mgasa
osv_mgasa
•added 2022/03/30 5:06 p.m.•21 views

MGASA-2022-0123 Updated openvpn packages fix security vulnerability

Potential authentication by-pass with multiple deferred authentication plug-ins. CVE-2022-0547...

9.8CVSS9.6AI score0.03574EPSS
SaveExploits0References5
Mageia
Mageia
•added 2022/03/30 5:06 p.m.•58 views

Updated openvpn packages fix security vulnerability

Potential authentication by-pass with multiple deferred authentication plug-ins. CVE-2022-0547...

9.8CVSS2.9AI score0.03574EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/03/30 12:00 a.m.•25 views

openSUSE: Security Advisory for openvpn (openSUSE-SU-2022:1029-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.03574EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/03/30 12:00 a.m.•14 views

SUSE: Security Advisory (SUSE-SU-2022:1024-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.03574EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2022/03/30 12:00 a.m.•20 views

SUSE: Security Advisory (SUSE-SU-2022:1029-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.03574EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/03/30 12:00 a.m.•44 views

SUSE SLES12 Security Update : openvpn (SUSE-SU-2022:1024-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1024-1 advisory. - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in bsc1197341. Tenable has extracted the preceding...

9.8CVSS6.8AI score0.03574EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/03/30 12:00 a.m.•42 views

openSUSE 15 Security Update : openvpn (openSUSE-SU-2022:1029-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:1029-1 advisory. - OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of...

9.8CVSS7.3AI score0.03574EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/03/30 12:00 a.m.•33 views

SUSE SLED15 / SLES15 Security Update : openvpn (SUSE-SU-2022:1029-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1029-1 advisory. - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in bsc1197341. Tenable has...

9.8CVSS6.8AI score0.03574EPSS
SaveExploits0References4
osv_suse
osv_suse
•added 2022/03/29 3:30 p.m.•17 views

SUSE-SU-2022:1029-1 Security update for openvpn

This update for openvpn fixes the following issues: - CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in bsc1197341...

9.8CVSS9.6AI score0.03574EPSS
SaveExploits0References3
Rows per page
Query Builder