1356 matches found
Mitsubishi Electric MELSEC-Q/L and MELSEC iQ-R
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Mitsubishi Electric Equipment: MELSEC-Q/L Series and iQ-R Series Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could result in a denial-of-service condition and/or...
Server-Side Request Forgery in gogs webhook
Impact The malicious user is able to discover services in the internal network through webhook functionality. All installations accepting public traffic are affected. Patches Webhook payload URLs are revalidated before each delivery to make sure they are not resolved to blocked local network...
PT-2022-13774
Name of the Vulnerable Software and Affected Versions gogs/gogs versions prior to 0.12.8 Description The issue is related to a Server-Side Request Forgery SSRF in the GitHub repository gogs/gogs. This allows a malicious user to discover services in the internal network through webhook...
CVE-2022-0910
A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmware versions 4.32 through 5.21, and VPN series firmware...
Zyxel USG/ZyWALL 授权问题漏洞
Zyxel USG/ZyWALL is a firewall from China's Heqin Technology Zyxel. An authorization issue vulnerability exists in Zyxel USG/ZyWALL versions 4.32-4.71, USG FLEX 4.50-5.21, ATP 4.32-5.21, and VPN 4.32-5.21, which stems from the lack of proper access control mechanisms and can be exploited to allow...
CVE-2022-26634
HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
The vulnerability of the implementation of the VPN Secure Sockets Layer (SSL) function in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to cause service interruptions.
The vulnerability of the implementation of the VPN Secure Sockets Layer SSL function in microprogramming-based network interface controllers from Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to resource management errors. Exploiting this vulnerability c...
The vulnerability of the AWS VPN Client service, related to the disclosure of information, allows a perpetrator to expose the protected information.
The vulnerability of the AWS VPN Client relates to the exposure of information. Exploiting this vulnerability could allow a malicious actor to disclose protected information using a specially created malicious configuration file named ovpn...
The vulnerability of the AWS VPN Client service, related to synchronization errors when using a shared resource, allows a perpetrator to escalate their privileges or cause a service failure.
The vulnerability of the AWS VPN Client is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...
The vulnerability of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD), a micro-programming network interface device, allows attackers to gain unauthorized access to protected information.
The vulnerability of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, which are microprogramming network devices, is related to encryption deficiencies using the Galois/Counter Mode GCM authentication method. Exploiting this vulnerability can allow an attacker to gai...
CVE-2022-27636
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, BIG-IP Edge Client may log sensitive AP...
CVE-2022-20745
A vulnerability in the web services interface for remote access VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. This vulnerability is due to...
CVE-2022-20715
A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to...
The vulnerability of the Clientless SSL VPN microprogramming system software of Cisco Adaptive Security Appliance Software (ASA) allows a intruder to cause a service failure or expose protected information.
The vulnerability of the Clientless SSL VPN microprogramming system software of Cisco Adaptive Security Appliance ASA is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure or expose sensitive information...
SonicWall Global VPN Client 代码问题漏洞
Sonicwall Global Vpn Client is a corporate VPN client from Sonicwall USA. SonicWall Global VPN Client suffers from a code issue vulnerability that stems from an untrusted search path at load time. An attacker could exploit the vulnerability to place a malicious file that would escalate privileges...
多款Cisco产品安全漏洞
Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances Software are both products of Cisco, Inc. Cisco Adaptive Security Appliances Software is a firewall and network security platform. The platform provides highly secure access to data and network resources, among other...
What is a VPN and what does data logging by a VPN means?
By Deeba Ahmed A virtual private network or simply VPN is a service that protects your privacy online. This article explains… This is a post from HackRead.com Read the original post: What is a VPN and what does data logging by a VPN means?...
The vulnerability of the SSL-VPN portal for FortiOS operating systems allows a hacker to obtain the encryption key.
The vulnerability of the SSL-VPN portal for FortiOS operating systems is related to the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow a malicious actor to obtain the encryption key remotely...
CVE-2022-25165
An issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the validation of VPN configuration files. This allows parameters outside of the AWS VPN Client allow list to be injected into the configuration file prior to the AWS VPN Client service running as SYSTEM...