Lucene search
+L

24 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-7824

Malware in sbrugna...

4.4CVSS5.6AI score0.00261EPSS
SaveExploits2References3
OSV
OSV
•added 2025/09/04 6:15 p.m.•22 views

CVE-2025-26424

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

4CVSS5.9AI score0.00096EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/04 5:11 p.m.•5 views

CVE-2025-26424

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.1AI score0.00096EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/04 5:11 p.m.•26 views

CVE-2025-26424

In multiple functions of VpnManager.java, there is a possible cross-user data leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00096EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/04 5:11 p.m.•452 views

CVE-2025-26424

A logic error in multiple functions of VpnManager.java within the Google Android operating system can lead to a cross-user data leak . This vulnerability allows for local information disclosure without requiring additional execution privileges or user interaction. While the NCSC notes general And...

4CVSS5.1AI score0.00096EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/04 12:00 a.m.•25 views

PT-2025-36009

Name of the Vulnerable Software and Affected Versions: VpnManager.java affected versions not specified Description: Multiple functions within VpnManager.java contain a logic error that may result in cross-user data leakage, potentially leading to local information disclosure. Exploitation does no...

4CVSS5.9AI score0.00096EPSS
SaveExploits0References5
OSV
OSV
•added 2022/03/30 4:15 p.m.•18 views

CVE-2021-39773

In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS5.9AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/02 6:15 p.m.•72 views

CVE-2021-26107

An improper access control vulnerability CWE-284 in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager...

6.3CVSS0.00513EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/02 6:15 p.m.•9 views

CVE-2021-26107

An improper access control vulnerability CWE-284 in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager...

6.3CVSS5AI score0.00513EPSS
SaveExploits0References2
Prion
Prion
•added 2021/11/02 6:15 p.m.•27 views

Improper access control

An improper access control vulnerability CWE-284 in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager...

4CVSS4.5AI score0.00513EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2021/11/02 5:51 p.m.•13 views

CVE-2021-26107

An improper access control vulnerability CWE-284 in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager...

6.3CVSS6.6AI score0.00513EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/11/02 5:51 p.m.•65 views

CVE-2021-26107

An improper access control vulnerability CWE-284 in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager...

6.3CVSS6.4AI score0.00513EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/02 12:00 a.m.•6 views

CVE-2021-26107: Undefined Security Weakness

An improper access control vulnerability CWE-284 in FortiManager versions 6.4.4 and 6.4.5 may allow an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager...

6.3CVSS5.8AI score0.00513EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/02 12:00 a.m.•2 views

PT-2021-16956

Name of the Vulnerable Software and Affected Versions FortiManager versions 6.4.4 and 6.4.5 Description The issue is related to improper access control, allowing an authenticated attacker with a restricted user profile to modify the VPN tunnel status of other VDOMs using VPN Manager...

6.3CVSS0.00513EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/11/02 12:00 a.m.•23 views

Fortinet FortiManager 安全漏洞

Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and can group devices into different management domains ADOM to further simplify the deployment and management of multi-device...

6.3CVSS5.6AI score0.00513EPSS
SaveExploits0References5
OSV
OSV
•added 2017/11/06 10:29 p.m.•14 views

CVE-2017-16637

In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime...

4.4CVSS5.7AI score0.00261EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2017/11/06 10:29 p.m.•3 views

CVE-2017-16637

In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime...

4.4CVSS5.7AI score0.00261EPSS
SaveExploits2References4
NVD
NVD
•added 2017/11/06 10:29 p.m.•23 views

CVE-2017-16637

In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime...

4.4CVSS4.7AI score0.00261EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2017/11/06 10:00 p.m.•39 views

CVE-2017-16637

In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime...

4.7AI score0.00261EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/06 12:00 a.m.•6 views

CVE-2017-16637: Improper Input Validation

In Vectura Perfect Privacy VPN Manager v1.10.10 and v1.10.11, when resetting the network data via the software client, with a running VPN connection, a critical error occurs which leads to a "FrmAdvancedProtection" crash. Although the mechanism malfunctions and an error occurs during the runtime...

4.4CVSS5.8AI score0.00261EPSS
SaveExploits2References2
Rows per page
Query Builder