The vulnerability of the implementation of the Virtual Private Network (VPN) technology based on Secure Sockets Layer (SSL) and Transport Layer Security (TLS protocols, provided by the Cisco Adaptive Security Appliance – ASA) allows a perpetrator to cause service interruptions.

The vulnerability of the VPN technology based on Secure Sockets Layer SSL and Transport Layer Security TLS implemented by Cisco Adaptive Security Appliance ASA is related to errors in string processing in the Base64 encoding format. Exploiting this vulnerability can allow an attacker to cause a...

October 24, 2019—KB4522355 (OS Build 18362.449)

None None...

CVE-2019-15261

A vulnerability in the Point-to-Point Tunneling Protocol PPTP VPN packet processing functionality in Cisco Aironet Access Points APs could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is due to...

CVE-2019-17059

A shell injection vulnerability on the Sophos Cyberoam firewall appliance with CyberoamOS before 10.6.6 MR-6 allows remote attackers to execute arbitrary commands via the Web Admin and SSL VPN consoles...

SMA Solar Technology AG Sunny WebBox

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: SMA Solar Technology AG Equipment: Sunny WebBox Vulnerability: Cross-Site Request Forgery 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to generate a...

Mozilla Launches 'Firefox Private Network' VPN Service as a Browser Extension

Mozilla has officially launched a new privacy-focused VPN service, called Firefox Private Network, as a browser extension that aims to encrypt your online activity and limit what websites and advertisers know about you. Firefox Private Network service is currently in beta and available only to...

Mozilla Launches 'Firefox Private Network' VPN Service as a Browser Extension

Mozilla has officially launched a new privacy-focused VPN service, called Firefox Private Network , as a browser extension that aims to encrypt your online activity and limit what websites and advertisers know about you. Firefox Private Network service is currently in beta and available only to...

Google Android VPN Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA in the U.S. VPN is one of the VPN Virtual Private Network components. An information disclosure vulnerability exists in the VPN component of Android, which arises from errors in the configuration ...

Private Internet Access (PIA) VPN Client Arbitrary Code Execution Vulnerability

Private Internet Access PIA is a commercial VPN service operated by London Trust Media. An arbitrary code execution vulnerability exists in the London Trust Media Private Internet Access PIA VPN client version 82 for Linux and macOS. An attacker could exploit this vulnerability by passing special...

CVE-2019-9657

Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE-2018-19588. This occurs because of incorrect protection of VPN certificates used for initiating a VPN session to the Alarm.com infrastructure on the local camera device...

Windows Defender Firewall: Private Profile: Apply local firewall rules

The policy determines whether the local firewall rules are merged with GP settings when connected to a private network. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the...

Urban Company: Private ip leaking through response

Name of Vulnerability: Information desclosure User Details: +91 ████ Summary: Private ip addresses are leaking through response in urban clap. Description: Hi team. During my research i found some IP address from the response.After finding the origin of the ip i found that these ip addresses are...

Vigor Router Configuration Website Has Weak Password Vulnerability

The default password can be passed to access the route and deployed to enable vpn for intranet roaming...

[SECURITY] Fedora 30 Update: libreswan-3.29-1.fc30

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the...

CVE-2018-13381

A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL VPN web portal allows a non-authenticated attacker to perform a Denial-of-service attack via special craft message...

CVE-2018-13384

A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains...

PT-2019-4642 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 5.2.14 and earlier FortiOS versions 5.4.0 through 5.4.12 FortiOS versions 5.6.0 through 5.6.10 FortiOS versions 6.0.0 through 6.0.4 FortiProxy version 1.2.8 and earlier FortiProxy version 2.0.0 Description: The issue is relat...

PT-2019-2120 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance versions prior to the fixed version Cisco Firepower Threat Defense versions prior to the fixed version Description: The issue is related to improper credential management when using NT LAN Manager NTLM or bas...

Building a VPN for Mobile Devices at the Network Level

By David Balaban In 2019, there is still surprisingly little information about such an old, simple, convenient, and secure technology, as mobile VPN - Virtual Private Network. In this article, I will describe how you can provide access to your virtual private network to any device with a SIM card...

Improper access control

An incorrect access control exists in the Sony Photo Sharing Plus application in the firmware before PKG6.5629 version for the X7500D TV and other applicable TVs. This vulnerability allows an attacker to read arbitrary files without authentication over HTTP when Photo Sharing Plus application is...