Downloads Resources over HTTP in adamvr-geoip-lite

Affected versions of adamvr-geoip-lite insecurely download resources over HTTP. In scenarios where an attacker has a privileged network position, they can modify or read such resources at will. This could impact the integrity and availability of the data being used to make geolocation decisions b...

Downloads Resources over HTTP in node-air-sdk

Affected versions of node-air-sdk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

GHSA-7HVM-29RF-2GF2 Downloads Resources over HTTP in node-air-sdk

Affected versions of node-air-sdk insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...

GHSA-9CHW-XRWX-F86J frames-compiler downloads Resources over HTTP

Affected versions of frames-compiler insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

frames-compiler downloads Resources over HTTP

Affected versions of frames-compiler insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on th...

The vulnerability of the implementation of the VPN Secure Sockets Layer (SSL) function in the microprogramming software for Cisco Small Business RV340, Cisco Small Business RV340W, Cisco Small Business RV345, and Cisco Small Business RV345P routers allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the VPN Secure Sockets Layer SSL implementation in microprogramming software for Cisco Small Business RV340, Cisco Small Business RV340W, Cisco Small Business RV345, and Cisco Small Business RV345P routers exists due to insufficient validation of input data. Exploiting this...

Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series vulnerable to cleartext transmission of sensitive information

Overview Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series contain a vulnerability that allows cleartext transmission of sensitive information CWE-319 between CPU modules and GX Works3 and/or GX Works2. Impact If this vulnerability is exploited, disclosure or alteration of information,...

Mozilla VPN – Firefox private network VPN is finally arriving

By Waqas Much-Awaited Mozilla VPN is on its way. This is a post from HackRead.com Read the original post: Mozilla VPN - Firefox private network VPN is finally arriving...

Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers IOS XE Data Forgery Issue Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. A data forgery vulnerability exists in Cisco IOS XE IPsec VPN in Cisco 4300 Series Integrated Services Routers and Cisco Catalyst 9800-L Wireless Controllers, which arises from the...

Unspecified Vulnerability in Pango AnchorFree VPN SDK

Pango AnchorFree VPN SDK is a VPN Virtual Private Network software development kit from Pango USA. A security vulnerability exists in Pango AnchorFree VPN SDK versions prior to 1.3.3.218. An attacker can exploit the vulnerability to execute malicious files with SYSTEM privileges...

The vulnerability of the VPN System Logging function in Cisco Firepower Threat Defense’s microprogramming-based network interface devices allows a intruder to trigger a service failure.

The vulnerability of the VPN System Logging function in Cisco Firepower Threat Defense FTD microprogramming systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2020-3125

A vulnerability in the Kerberos authentication feature of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to impersonate the Kerberos key distribution center KDC and bypass authentication on an affected device that is configured to perform Kerberos...

PT-2020-2165 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the web services interface could allow an unauthenticated, remote attacker to condu...

Huawei EulerOS: Security Advisory for NetworkManager (EulerOS-SA-2020-1524)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Linux operating system, related to an error in determining network connections for VPNs, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Linux operating system is related to an error in determining network connections for VPNs. Exploiting this vulnerability allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions...

Grandstream GXP1600 Code Injection Vulnerability

The Grandstream GXP1600 is an IP phone product from Grandstream. A code injection vulnerability exists in the Grandstream GXP1600 series using firmware version 1.0.4.152 and earlier. The vulnerability can be exploited to add arbitrary OpenVPN configuration settings to a configuration file with th...

Windscribe Elevation of Privilege Vulnerability

WindScribe is a suite of VPN software for anonymously connecting to the Internet. Windscribe suffers from an elevation of privilege vulnerability. An attacker can exploit the vulnerability to elevate privileges...

Information Disclosure

firefox is vulnerable to information disclosure. A flaw was found in the Firefox XMLHttpRequest object. A remote site could use this flaw to gather information about servers on an internal private network...

March 30, 2020—KB4554354 (OS Build 17763.1132)

None None...

The vulnerability of the SSL VPN web portal of the operating system FortiOS allows a hacker to trigger a service failure.

The vulnerability of the SSL VPN web portal of the operating system FortiOS is related to an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...