Lucene search
K

94 matches found

Positive Technologies
Positive Technologies
added 2025/09/19 12:0 a.m.5 views

PT-2025-38606

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 1.0.735 Vasion Print formerly PrinterLogic Application versions prior to 20.0.1330 Description The software stores inter-process communication IPC request and response...

6.9CVSS6.3AI score0.00231EPSS
Exploits1References6
NVD
NVD
added 2025/09/18 11:15 p.m.3 views

CVE-2025-59691

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv6 traffic is no longer routed or blocked. In th...

3.7CVSS0.00203EPSS
Exploits0References1
CVE
CVE
added 2025/09/18 12:0 a.m.22 views

CVE-2025-59692

The CVE-2025-59692 issue affects PureVPN CLI 2.0.1 and GUI 2.10.0 on Linux. The root cause is that the VPN client mishandles firewalling by flushing existing iptables rules and applying default ACCEPT policies when connecting to a VPN server, thereby removing manually configured rules and rules f...

3.7CVSS6.5AI score0.00193EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/18 12:0 a.m.11 views

CVE-2025-59691

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv6 traffic is no longer routed or blocked. In th...

3.7CVSS0.00203EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/18 12:0 a.m.1 views

CVE-2025-59691

PureVPN client applications on Linux through September 2025 allow IPv6 traffic to leak outside the VPN tunnel upon network events such as Wi-Fi reconnect or system resume. In the CLI client, the VPN auto-reconnects and claims to be connected, but IPv6 traffic is no longer routed or blocked. In th...

3.7CVSS6.4AI score0.00203EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2024-46958

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This i...

9.1CVSS5.8AI score0.00555EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-5981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct...

5.9CVSS6.5AI score0.01257EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/13 8:12 a.m.4 views

CVE-2025-7012 Cato Networks Linux Client Local Privilege Escalation via Symlink

An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling...

8.6CVSS7.2AI score0.00145EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:39 p.m.12 views

CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

5.3CVSS6.8AI score0.22792EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:13 p.m.14 views

CVE-2020-8199

Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root...

7.8CVSS7AI score0.0039EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:51 p.m.6 views

CVE-2020-8250

A vulnerability in the Pulse Secure Desktop Client Linux 9.1R9 could allow local attackers to escalate privilege...

7.8CVSS6.8AI score0.00477EPSS
Exploits0References1
Citrix
Citrix
added 2025/04/28 12:0 a.m.7 views

Enabling EDT Lost Tolerant Mode using Linux as client.

How to enable EDT Lost Tolerant Mode in the latest VDAs versions when using Linux as client, all requirements needed...

7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/14 12:0 a.m.5 views

The vulnerability of the `parse_server_interfaces()` function in the `fs/smb/client/smb2ops.c` module allows a hacker to compromise the integrity of protected information or cause service failures for the SMB kernel client of the Linux operating system.

The vulnerability of the parseserverinterfaces function in the fs/smb/client/smb2ops.c module, which is part of the SMB client support in Linux operating systems, involves a numerical port escape or cyclic shift vulnerability. Exploiting this vulnerability could allow an attacker to compromise th...

7.1CVSS6.5AI score0.00407EPSS
Exploits0References36Affected Software5
Citrix
Citrix
added 2025/04/01 12:0 a.m.9 views

Applying Modern UI patch for Citrix Storefront LTSR2402 CU2 (to support CWA Linux Clients)

Symptoms or Error When users on Linux login to their Citrix Workspace App for Linux , they see an infinite progress screen or error instead of seeing the list of their apps and desktops. This is applicable only for customers where the admins have 1. Upgraded their StoreFronts to the new Storefron...

6.9AI score
Exploits0
OSV
OSV
added 2024/08/25 5:15 p.m.3 views

CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

5.3CVSS5.8AI score0.0044EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/08/25 12:0 a.m.16 views

CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

7AI score0.0044EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/08/25 12:0 a.m.18 views

CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...

0.0044EPSS
Exploits1References2
CVE
CVE
added 2024/08/25 12:0 a.m.63 views

CVE-2023-48957

CVE-2023-48957 concerns the PureVPN Linux client (2.0.2-Productions) where the DNS query handling is flawed, allowing DNS requests to bypass the VPN tunnel and go directly to the ISP/default DNS servers. The root cause is an improper DNS query handling/control flow in the client, per connected ad...

5.3CVSS7AI score0.0044EPSS
Exploits1References2Affected Software1
CNVD
CNVD
added 2024/06/04 12:0 a.m.5 views

Ivanti Secure Access Client for Linux Elevation of Privilege Vulnerability

Ivanti Secure Access Client for Linux is a solution for enabling secure remote access, supporting SSL VPN connections and allowing users to securely access internal network resources e.g., administrative systems, applications, etc. from off-campus. An elevation of privilege vulnerability exists i...

7.3CVSS7.9AI score0.0031EPSS
Exploits0References1
OSV
OSV
added 2024/05/31 6:15 p.m.4 views

CVE-2023-46810

A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute code as root...

7.3CVSS5.9AI score0.0031EPSS
Exploits0References1
Rows per page
Query Builder