EUVD-2023-36592

Malicious code in bioql PyPI...

EUVD-2022-47148

Malicious code in bioql PyPI...

EUVD-2025-15743

Malicious code in bioql PyPI...

EUVD-2022-29200

Malicious code in bioql PyPI...

EUVD-2024-37082

Malicious code in bioql PyPI...

CLSA-2025-1759485890 openvpn: Fix of CVE-2020-15078

CVE-2020-15078: fix authentication bypass and access to control channel data on servers configured with deferred authentication...

openvpn: Fix of CVE-2020-15078

CVE-2020-15078: fix authentication bypass and access to control channel data on servers configured with deferred authentication...

CLSA-2025-1759337779 openvpn: Fix of CVE-2020-15078

CVE-2020-15078: fix authentication bypass and access to control channel data on servers configured with deferred authentication...

FreeBSD : openvpn-devel -- script injection vulnerability from trusted but malicious server (e5cf9f44-9a64-11f0-8241-93c889bb8de1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e5cf9f44-9a64-11f0-8241-93c889bb8de1 advisory. Gert Doering reports: Notable changes beta1 - beta2 are: ... add proper input sanitation to DNS strings...

openvpn-devel -- script injection vulnerability from trusted but malicious server

Gert Doering reports: Notable changes beta1 - beta2 are: ... add proper input sanitation to DNS strings to prevent an attack coming from a trusted-but-malicous OpenVPN server CVE: 2025-10680, affects unixoid systems with --dns-updown scripts and windows using the built-in powershell call Lev...

Linux Distros Unpatched Vulnerability : CVE-2020-20813

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. CVE-2020-20813 Note that Nessus reli...

[SECURITY] [DLA 4079-2] openvpn regression update

Debian LTS Advisory DLA-4079-2 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara August 31, 2025 https://wiki.debian.org/LTS Package : openvpn Version : 2.5.1-3+deb11u2 CVE ID : Debian Bug : 1112516 The upstream fix for CVE-2024-5594 released in DLA-4079...

DLA-4079-2 openvpn - regression update

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2006-2229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the...

Astra Linux – Vulnerability in OpenVPN

OpenVPN versions 2.6.1 through 2.6.13 in server mode, using TLS-crypt-v2, allow remote attackers to trigger a denial of service by corrupting and replaying network packets during the early handshake phase...

VulnCheck KEV: CVE-2024-45887

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to doOpenVPN...

Linux Distros Unpatched Vulnerability : CVE-2025-3908

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory whi...

The vulnerability of OpenVPN 3 Linux software for network encryption lies in the improper handling of symbolic links before accessing the file. This allows a malicious user to elevate their privileges and alter the access rights to the target directory.

The vulnerability of the OpenVPN 3 Linux network encryption software is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to enhance their privileges and change access rights to the target directory...

Linux Distros Unpatched Vulnerability : CVE-2018-7544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a password...

Linux Distros Unpatched Vulnerability : CVE-2021-3773

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks...