CVE-2021-47961: Plaintext Storage of a Password

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combin...

CVE-2021-47960: Files or Directories Accessible to External Parties

A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web pag...

EUVD-2006-5790

Malware in sbrugna...

EUVD-2018-20537

Malware in sbrugna...

EUVD-2023-51255

Malicious code in bioql PyPI...

EUVD-2023-58034

Malicious code in bioql PyPI...

CVE-2023-5748

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors...

CVE-2021-36809

A local attacker can overwrite arbitrary files on the system with VPN client logs using administrator privileges, potentially resulting in a denial of service and data loss, in all versions of Sophos SSL VPN client...

Cross site scripting

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message...

CVE-2023-5593

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message...

CVE-2023-5593

CVE-2023-5593 concerns the Windows-based SecuExtender SSL VPN Client, version 4.0.4.0, where an out-of-bounds write in handling a CREATE message could allow an authenticated local user to escalate privileges. Root cause: a buffer/write bounds issue in the vulnerable component. Impact: local privi...

CVE-2023-5593: Out-of-bounds Write

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message...

CVE-2023-5748

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors...

CVE-2023-47101

The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...

Securepoint SSL VPN Client Security Vulnerability

Securepoint SSL VPN Client is an open source SSL VPN client for Windows. A security vulnerability exists in Securepoint SSL VPN Client versions prior to 2.0.40 that stems from a local elevation of privilege vulnerability in the installer during installation or repair...

CVE-2023-47101

The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...

CVE-2023-47101

The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...

CVE-2023-47101: Improper Privilege Management

The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...

CVE-2023-47101

The installer aka openvpn-client-installer in Securepoint SSL VPN Client before 2.0.40 allows local privilege escalation during installation or repair...

CVE-2023-5748

CVE-2023-5748 affects Synology SSL VPN Client prior to 1.4.7-0687. A buffer copy without input size checking in the CGI component enables local users to cause a denial-of-service. Remediation: upgrade to 1.4.7-0687 or later. Other connected sources corroborate the CGI-based buffer overflow issue ...