https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:30:21 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-07060 bdu:2024-07060 https://cve.radiocsirt.org/vuln/bdu:2024-07060 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0452 certfr-2024-avi-0452 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0452 https://cve.radiocsirt.org/vuln/euvd-2026-159704 EUVD-2026-159704 https://cve.radiocsirt.org/vuln/euvd-2026-159704 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27459 <p>The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.</p> <p>The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27459 https://cve.radiocsirt.org/vuln/ghsa-f6v5-hjxr-p24j <p>The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.</p> <p>The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-f6v5-hjxr-p24j https://cve.radiocsirt.org/vuln/gsd-2024-27459 gsd-2024-27459 https://cve.radiocsirt.org/vuln/gsd-2024-27459 https://cve.radiocsirt.org/vuln/icsa-25-072-10 <p>tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space If an attacker with SeImeprsonatePrivilege manages to create a namedpipe server with a name matching that used by the &#34;Interactive Service&#34;, user interfaces such as OpenVPN-GUI connecting to it could allow the attacker to impersonate the user running the UI. The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service. OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session</p> <p>tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space If an attacker with SeImeprsonatePrivilege manages to create a namedpipe server with a name matching that used by the &#34;Interactive Service&#34;, user interfaces such as OpenVPN-GUI connecting to it could allow the attacker to impersonate the user running the UI. The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service. OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session</p> https://cve.radiocsirt.org/vuln/icsa-25-072-10 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0688 <p>Ein Angreifer kann eine Schwachstelle in OpenVPN ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder seine Privilegien zu erweitern.</p> <p>Ein Angreifer kann eine Schwachstelle in OpenVPN ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0688