1341 matches found
Cisco Firepower Threat Defense Security Vulnerability
Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A security vulnerability exists in the Cisco Adaptive Security Appliance and Cisco Firepower Threat Defense, which stems from a vulnerability in the Remote Access SSL VPN...
CVE-2023-41712
SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash...
SonicWALL SonicOS Buffer Error Vulnerability
SonicWALL SonicOS is a suite of operating systems from SonicWALL, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in SonicWALL SonicOS that stems from a stack-based buffer overflow vulnerability in the SSL VPN plainprefs.exp URL endpoint that causes the firewall t...
Vulnerabilities fixed in Sonicwall
SonicWall has fixed vulnerabilities in SonicOS. A remote malicious party can exploit multiple vulnerabilities in SonicOS web interface and SSLVPN portal to cause a denial-of-service, gain access to sensitive data and/or obtain elevated user privileges. SonicWall has released updates to address th...
CVE-2023-32275
An information disclosure vulnerability exists in the CtEnumCa functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability...
CVE-2023-27395
A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can perform a man-in-the-middle attack to trigger this...
CVE-2023-23581
A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service...
SoftEther VPN Number Error Vulnerability
SoftEther VPN is an open source cross-platform multi-protocol VPN Virtual Private Network application. A numeric error vulnerability exists in SoftEther VPN versions 5.01.9674 and 5.02, which stems from an integer overflow vulnerability in the vpnserver OvsProcessData function that can be exploit...
SoftEther VPN Resource Management Error Vulnerability
SoftEther VPN is an open source, cross-platform, multi-protocol VPN Virtual Private Network application. A resource management error vulnerability exists in SoftEther VPN version 5.02, which stems from a denial-of-service vulnerability in the vpnserver ConnectionAccept function, which can be...
The vulnerability of the Web Server Authentication Required VPN-portal Clientless Secure Sockets Layer (SSL) micro-programming system of Cisco Adaptive Security Appliance (ASA) allows a attacker to carry out XSS attacks.
The vulnerability of the Web Server Authentication Required VPN-portal Clientless Secure Sockets Layer SSL micro-programming system of Cisco Adaptive Security Appliance ASA exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicio...
CVE-2023-41305
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality...
Cisco IOS Buffer Error Vulnerability
Cisco IOS is a suite of operating systems developed by Cisco for its network devices. A security vulnerability exists in the Cisco IOS software and Cisco IOS XE, which stems from a vulnerability in the Cisco Group Encrypted Transport VPN GET VPN feature that could allow an authenticated, remote...
F5 BIG-IP AFM Security Vulnerability
F5 BIG-IP AFM is an advanced firewall product from F5 USA for protection against DDos attacks. A security vulnerability exists in the F5 BIG-IP AFM Clients that stems from a vulnerability that allows an attacker to trick clients into sending IP traffic outside of the VPN tunnel...
The vulnerability of the Clario antivirus software client’s VPN client relates to the lack of protection for transmitted data. This allows a hacker to send arbitrary IP traffic as plain text beyond the VPN tunnel.
The vulnerability of the Clario antivirus software’s VPN client lies in the lack of protection for transmitted data. Exploiting this vulnerability allows a malicious actor to send arbitrary IP traffic as plain text outside the VPN tunnel...
Mozilla VPN Security Breach
Mozilla VPN is an open source virtual private network web browser extension, desktop application and mobile application from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla VPN Linux that stems from the application's invalid Polkit authentication check and...
CVE-2023-4587
An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user backup files or device configuration files over a local network or through a VPN server...
PT-2023-27979 · Tenda · Tenda Ac9 +1
Name of the Vulnerable Software and Affected Versions: Tenda AC9 version V15.03.06.42 multi Tenda AC5 version V15.03.06.28 Description: A stack overflow issue was discovered via parameters startIp and endIp at the "/goform/SetPptpServerCfg" API endpoint. Recommendations: For Tenda AC9 version...
The vulnerability of the McAfee Safe Connect VPN service lies in its uncontrolled search path, which allows attackers to escalate their privileges.
The vulnerability of the McAfee Safe Connect VPN service is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Stormshield SSL VPN Client 加密问题漏洞
Stormshield SSL VPN Client is a VPN client from Stormshield. A security vulnerability exists in Stormshield SSL VPN Client versions prior to 3.2.0 that stems from allowing an attacker enough access to other encrypted address books...
