10128 matches found
PT-2022-3970 · Kaspersky · Kaspersky Vpn Secure Connection For Windows
Name of the Vulnerable Software and Affected Versions: Kaspersky VPN Secure Connection for Windows version up to 21.5 Description: The issue is related to the possibility of arbitrary file deletion in the system via abuse of the 'Delete All Service Data And Reports' feature by a local authenticat...
Cisco Small Business RV110W Arbitrary Command Execution
The vulnerability of the web-based management interfaces for Cisco Small Business RV110W Wireless-N VPN Firewalls, Cisco Small Business RV130 Series VPN Routers, RV130W Wireless-N Multifunction VPN Routers, and RV215W Wireless-N VPN Routers is related to the lack of measures for input data...
Robustel R1510 Import HTTPS Cert File Command Execution
The vulnerability of the importhttpscertfile function in the Robustel R1510 VPN router software lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...
ASB-A-219546241
In onDefaultNetworkChanged of Vpn.java, there is a possible way to disable VPN due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-33158
Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a local attacker to obtain privilege escalation on an affected system...
CVE-2022-33158
Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a local attacker to obtain privilege escalation on an affected system...
CVE-2022-33158
Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a local attacker to obtain privilege escalation on an affected system...
Design/Logic Flaw
Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a local attacker to obtain privilege escalation on an affected system...
CVE-2022-33158
Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a local attacker to obtain privilege escalation on an affected system...
CVE-2022-33158
The CVE-2022-33158 entry concerns Trend Micro VPN Proxy Pro (versions 5.2.1026 and below). The root cause is overly permissive permissions on a key directory, enabling a local attacker to escalate privileges on an affected system. Connected advisories corroborate the local-privilege-escalation im...
Over a Dozen Android Apps on Google Play Store Caught Dropping Banking Malware
A malicious campaign leveraged seemingly innocuous Android dropper apps on the Google Play Store to compromise users' devices with banking malware. These 17 dropper apps, collectively dubbed DawDropper by Trend Micro, masqueraded as productivity and utility apps such as document scanners, QR code...
TP-LINK TL-R473G Remote Code Execution Vulnerability
The TP-LINK TL-R473G is a Gigabit Enterprise VPN Router from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-R473G version 2.0.1 Build 220529 Rel.65574n. An attacker exploits the vulnerability to execute remote code via specially crafted packets...
CVE-2022-33158: Files or Directories Accessible to External Parties
Trend Micro VPN Proxy Pro version 5.2.1026 and below contains a vulnerability involving some overly permissive folders in a key directory which could allow a local attacker to obtain privilege escalation on an affected system...
Cisco Small Business RV110W Web Interface Code Execution
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W Wireless-N VPN Firewalls, Cisco Small Business RV130 Series VPN Routers, RV130W Wireless-N Multifunction VPN Routers, and RV215W Wireless-N VPN Routers arises from an operation that...
Robustel R1510 import_sdk_file Command Execution
The vulnerability of the importsdkfile function in the Microprogramming Software for VPN Routers of Robustel R1510 relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...
CVE-2022-34593
DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability...
CVE-2022-34593
DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability...
CVE-2022-34593
DPTech VPN v8.1.28.0 was discovered to contain an arbitrary file read vulnerability...