Lucene search
+L

1731 matches found

Cvelist
Cvelist
•added 2026/02/19 8:00 p.m.•36 views

CVE-2026-2738

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet...

6.8CVSS0.00134EPSS
SaveExploits0References1
CVE
CVE
•added 2026/02/19 8:00 p.m.•36 views

CVE-2026-2738

CVE-2026-2738 affects OpenVPN ovpn-dco-win 2.8.0. A buffer overflow in the handling of encrypted packets can be triggered by sending oversized packets to the remote peer when the AEAD tag appears at the end of the packet, enabling a local attacker to crash the system. The CVSS 4.0 vector indicate...

6.8CVSS6AI score0.00134EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/19 12:00 a.m.•29 views

OpenVPN ovpn-dco-win 安全漏洞

OpenVPN ovpn-dco-win is a virtual network adapter for Windows developed by OpenVPN. Version 2.8.0 of OpenVPN ovpn-dco-win contains a security vulnerability. This vulnerability arises when AEAD tags appear at the end of encrypted packets, and sending excessively large packets to remote peers may...

6.8CVSS6AI score0.00134EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•2 views

CVE-2026-2738: Incorrect Calculation of Buffer Size

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet...

6.8CVSS5.9AI score0.00134EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/17 7:28 a.m.•28 views

CVE-2026-2542

A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-service.exe. Executing a manipulation can lead to unquoted search path. It is possible to launch the attack on the local host. Thi...

7.3CVSS5AI score0.00163EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/16 9:30 a.m.•21 views

EUVD-2026-6120

A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-service.exe. Executing a manipulation can lead to unquoted search path. It is possible to launch the attack on the local host. Thi...

7.3CVSS5AI score0.00163EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/02/16 6:32 a.m.•8 views

CVE-2026-2542 Total VPN win-service.exe unquoted search path

A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-service.exe. Executing a manipulation can lead to unquoted search path. It is possible to launch the attack on the local host. Thi...

7.3CVSS6AI score0.00163EPSS
SaveExploits0References4
CVE
CVE
•added 2026/02/16 6:32 a.m.•42 views

CVE-2026-2542

CVE-2026-2542 affects Total VPN 0.5.29.0 on Windows, where an unknown functionality in C:\Program Files\Total VPN\win-service.exe can be manipulated to yield an unquoted search path. This results in a local attack nameable as a path ambiguity issue. The vulnerability is described as high severity...

7.3CVSS6AI score0.00163EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/16 12:00 a.m.•4 views

CVE-2026-2542: Unquoted Search Path or Element

A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-service.exe. Executing a manipulation can lead to unquoted search path. It is possible to launch the attack on the local host. Thi...

7.3CVSS6.2AI score0.00163EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/16 12:00 a.m.•21 views

Total VPN 代码问题漏洞

Total VPN is a virtual private network service software provided by the American company Total VPN. Version 0.5.29.0 of Total VPN has a code vulnerability. This vulnerability stems from an issue with search paths in the file C:Program FilesTotal VPNwin-service.exe that are not enclosed in quotati...

7.3CVSS7.1AI score0.00163EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/02/16 12:00 a.m.•28 views

PT-2026-8316

Name of the Vulnerable Software and Affected Versions Total VPN version 0.5.29.0 Description A security issue exists in Total VPN 0.5.29.0 on Windows related to an unquoted search path within the file C:Program FilesTotal VPNwin-service.exe. This can lead to potential local privilege escalation...

7.3CVSS6.8AI score0.00163EPSS
SaveExploits0References12
OSV
OSV
•added 2026/02/12 10:10 a.m.•18 views

RHSA-2026:2529 Red Hat Security Advisory: spice-client-win security update

Bulletin has no description...

8.6CVSS6.8AI score0.01075EPSS
SaveExploits0References13
OSV
OSV
•added 2026/02/12 10:10 a.m.•18 views

RHSA-2026:2528 Red Hat Security Advisory: spice-client-win security update

Bulletin has no description...

8.6CVSS6.8AI score0.01075EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
•added 2026/02/11 7:44 p.m.•13 views

CVE-2026-21236

Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00443EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/02/11 10:36 a.m.•24 views

Important: Red Hat Security Advisory: spice-client-win security update

An update for spice-client-win is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...

8.6CVSS6.7AI score0.01075EPSS
SaveExploits0References3
OSV
OSV
•added 2026/02/11 10:10 a.m.•20 views

RHSA-2026:2514 Red Hat Security Advisory: spice-client-win security update

Bulletin has no description...

8.6CVSS6.8AI score0.01075EPSS
SaveExploits0References13
Rockylinux
Rockylinux
•added 2026/02/11 9:10 a.m.•22 views

spice-client-win security update

An update is available for spice-client-win. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Spice client MSI installers for Windows clients Security Fixes:...

8.6CVSS6.8AI score0.01075EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/02/11 7:51 a.m.•21 views

Important: Red Hat Security Advisory: spice-client-win security update

An update for spice-client-win is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.6CVSS6.7AI score0.01075EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/02/11 12:00 a.m.•11 views

RockyLinux 8 : spice-client-win (RLSA-2026:2214)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:2214 advisory. libsoup: Signed to Unsigned Conversion Error Leading to Stack-Based Buffer Overflow in libsoup NTLM Authentication CVE-2026-0719 libsoup: Stack-Based...

8.6CVSS7AI score0.01075EPSS
SaveExploits0References5
NVD
NVD
•added 2026/02/10 6:16 p.m.•12 views

CVE-2026-21241

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS0.02587EPSS
SaveExploits0References1
Rows per page
Query Builder