Lucene search
K

43 matches found

NVD
NVD
added 2025/10/27 12:15 p.m.9 views

CVE-2025-11955

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid...

8.2CVSS0.00241EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/27 11:30 a.m.7 views

CVE-2025-11955 Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid...

8.2CVSS0.00241EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/27 11:30 a.m.2 views

CVE-2025-11955 Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid...

8.2CVSS6.8AI score0.00241EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/27 11:30 a.m.3 views

EUVD-2025-36160

Incorrect validation of OCSP certificates vulnerability in TheGreenBow VPN, versions 7.5 and 7.6. During the IKEv2 authentication step, the OCSP-enabled VPN client establishes the tunnel even if it does not receive an OCSP response or if the OCSP response signature is invalid...

8.2CVSS6.6AI score0.00241EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.2 views

PT-2025-43935

Name of the Vulnerable Software and Affected Versions TheGreenBow VPN versions 7.5 through 7.6 Description The software does not properly validate OCSP certificates. During the IKEv2 authentication process, the VPN client establishes a tunnel even if an OCSP response is not received or if the OCS...

8.2CVSS6.8AI score0.00241EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/27 12:0 a.m.3 views

TheGreenBow VPN 安全漏洞

TheGreenBow VPN is a VPN client software from the French company TheGreenBow. A security vulnerability exists in TheGreenBow VPN versions 7.5 and 7.6 that stems from incorrect OCSP certificate validation and could lead to the creation of insecure VPN tunnels...

8.2CVSS6.6AI score0.00241EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2009-2906

Malware in sbrugna...

2.1CVSS6.4AI score0.00854EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/23 10:36 a.m.4 views

CVE-2024-45750

An issue in TheGreenBow Windows Standard VPN Client 6.87.108 and older, Windows Enterprise VPN Client 6.87.109 and older, Windows Enterprise VPN Client 7.5.007 and older, Android VPN Client 6.4.5 and older VPN Client Linux 3.4 and older, VPN Client MacOS 2.4.10 and older allows a remote attacker ...

7.3CVSS8AI score0.00485EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:15 a.m.5 views

CVE-2023-47267

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file...

9.8CVSS7.2AI score0.0075EPSS
Exploits0References1
NVD
NVD
added 2024/09/25 6:15 p.m.9 views

CVE-2024-45750

An issue in TheGreenBow Windows Standard VPN Client 6.87.108 and older, Windows Enterprise VPN Client 6.87.109 and older, Windows Enterprise VPN Client 7.5.007 and older, Android VPN Client 6.4.5 and older VPN Client Linux 3.4 and older, VPN Client MacOS 2.4.10 and older allows a remote attacker ...

7.3CVSS0.00485EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/09/25 12:0 a.m.5 views

PT-2024-31747 · Thegreenbow · Thegreenbow Windows Standard Vpn Client +4

Name of the Vulnerable Software and Affected Versions: TheGreenBow Windows Standard VPN Client versions 6.87.108 and older TheGreenBow Windows Enterprise VPN Client versions 6.87.109 and older TheGreenBow Windows Enterprise VPN Client versions 7.5.007 and older TheGreenBow Android VPN Client...

7.3CVSS8.3AI score0.00485EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/09/25 12:0 a.m.2 views

TheGreenBow Windows Certified VPN Client 安全漏洞

TheGreenBow Windows Certified VPN Client is a client VPN from TheGreenBow. A security vulnerability exists in TheGreenBow Windows Certified VPN Client. A remote attacker could exploit the vulnerability to execute arbitrary code via the IKEv2 authentication phase...

7.3CVSS7.9AI score0.00485EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/25 12:0 a.m.11 views

CVE-2024-45750

An issue in TheGreenBow Windows Standard VPN Client 6.87.108 and older, Windows Enterprise VPN Client 6.87.109 and older, Windows Enterprise VPN Client 7.5.007 and older, Android VPN Client 6.4.5 and older VPN Client Linux 3.4 and older, VPN Client MacOS 2.4.10 and older allows a remote attacker ...

0.00485EPSS
Exploits0References2
CVE
CVE
added 2024/09/25 12:0 a.m.59 views

CVE-2024-45750

Summary (CVE-2024-45750) : TheGreenBow VPN clients across platforms are affected by an issue that allows a remote attacker to execute arbitrary code during the IKEv2 authentication phase due to acceptance of malformed ECDSA signatures, leading to tunnel establishment. Affected products and versio...

7.3CVSS8.2AI score0.00485EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/25 12:0 a.m.20 views

CVE-2024-45750

An issue in TheGreenBow Windows Standard VPN Client 6.87.108 and older, Windows Enterprise VPN Client 6.87.109 and older, Windows Enterprise VPN Client 7.5.007 and older, Android VPN Client 6.4.5 and older VPN Client Linux 3.4 and older, VPN Client MacOS 2.4.10 and older allows a remote attacker ...

7.9AI score0.00485EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2023/12/19 10:15 p.m.1 views

CVE-2023-47267

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file...

9.8CVSS7.3AI score0.0075EPSS
Exploits0References2
OSV
OSV
added 2023/12/19 10:15 p.m.3 views

CVE-2023-47267

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file...

9.8CVSS5.8AI score0.0075EPSS
Exploits0References1
NVD
NVD
added 2023/12/19 10:15 p.m.12 views

CVE-2023-47267

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file...

9.8CVSS0.0075EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/12/19 12:0 a.m.4 views

PT-2023-30401

Name of the Vulnerable Software and Affected Versions TheGreenBow Windows Enterprise Certified VPN Client version 6.52 TheGreenBow Windows Standard VPN Client version 6.87 TheGreenBow Windows Enterprise VPN Client version 6.87 Description An issue discovered in TheGreenBow VPN clients allows...

9.8CVSS7AI score0.0075EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/12/19 12:0 a.m.4 views

TheGreenBow Windows Certified VPN Client Security Vulnerability

TheGreenBow Windows Certified VPN Client is a client VPN from TheGreenBow. TheGreenBow Windows Certified VPN Client suffers from a security vulnerability that stems from an attacker's ability to cause elevation of privilege via a carefully crafted memory-mapped file...

9.8CVSS7AI score0.0075EPSS
Exploits0References2
Rows per page
Query Builder