10083 matches found
Information disclosure
UNSUPPPORTED WHEN ASSIGNED An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server...
CVE-2023-4587 Insecure direct object reference in ZKTeco ZEM800
An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server...
CVE-2023-4587 Insecure direct object reference in ZKTeco ZEM800
An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server...
PT-2023-29736 · Zkteco · Zkteco Zem800
Name of the Vulnerable Software and Affected Versions: ZKTeco ZEM800 version 6.60 Description: An IDOR vulnerability has been found in the ZKTeco ZEM800 product. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or...
CVE-2023-4587: Authorization Bypass Through User-Controlled Key
An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server...
Security Issues fixed in Mozilla VPN for Linux v2.16.1 — Mozilla
An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups.This bug only affects Mozilla VPN on Linux. Other operating systems are unaffected...
PT-2023-4835 · Mozilla · Vpn
Name of the Vulnerable Software and Affected Versions: Mozilla VPN client for Linux versions prior to 2.16.1 Description: The issue is related to an invalid Polkit Authentication check and missing authentication requirements for D-Bus methods, allowing any local user to configure arbitrary VPN...
Under Siege: Rapid7-Observed Exploitation of Cisco ASA SSL VPNs
Tyler Starks, Christiaan Beek, Robert Knapp, Zach Dayton, and Caitlin Condon contributed to this blog. Rapid7’s managed detection and response MDR teams have observed increased threat activity targeting Cisco ASA SSL VPN appliances physical and virtual dating back to at least March 2023. In some...
VulnCheck KEV: CVE-2023-20269
Cisco Adaptive Security Appliance and Firepower Threat Defense contain an unauthorized access vulnerability that could allow an unauthenticated, remote attacker to conduct a brute force attack in an attempt to identify valid username and password combinations or establish a clientless SSL VPN...
CVE-2022-46783
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...
CVE-2022-46783
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...
CVE-2022-46783: Inadequate Encryption Strength
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...
CVE-2022-46783
CVE-2022-46783 affects Stormshield SSL VPN Client before 3.2.0. When multiple address books are configured, an attacker may access other encrypted address books, exposing confidential data. The issue is documented across multiple sources; remediation available: upgrade to version 3.2.0 or later ....
PT-2023-15028 · Stormshield · Stormshield Ssl Vpn Client
Name of the Vulnerable Software and Affected Versions: Stormshield SSL VPN Client versions prior to 3.2.0 Description: An issue was discovered in the Stormshield SSL VPN Client. If multiple address books are used, an attacker may be able to access the other encrypted address book. Recommendations...
CVE-2022-46783
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...
CVE-2022-46783
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...
Cannot Connect to Server ";40;STAxxxx" on Mac Client
Symptom 1: Cannot connect to server ";40;STA " when launch ICA session from mac client With VPN enabled, user can only access internal network and fail to launch ICA session. Without VPN enabled,user can access to external network and launch ICA Session successfully Symptom 2: "The SDK context...
CVE-2021-27932
Stormshield Network Security SNS VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions...