softether kayıtları
softether üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %6,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-400 Uncontrolled Resource Consumption2
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-125 Out-of-bounds Read1
- CWE-191 Integer Underflow (Wrap or Wraparound)1
- CWE-201 Insertion of Sensitive Information Into Sent Data1
- CWE-300 Channel Accessible by Non-Endpoint1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-25565İstismar yok | SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions.softether · vpn · CWE-120 | Kritik9,8 | — | %0,6 | 12 Mar 2025 |
39İzleyin | CVE-2025-25567İstismar yok | SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function.softether · vpn · CWE-120 | Kritik9,8 | — | %0,6 | 12 Mar 2025 |
39İzleyin | CVE-2025-25568İstismar yok | SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function.softether · vpn · CWE-416 | Kritik9,8 | — | %0,6 | 12 Mar 2025 |
32İzleyin | CVE-2023-27395İstismar yok | A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674softether · vpn · CWE-122 | Yüksek8,1 | — | %1,5 | 12 Eki 2023 |
31İzleyin | CVE-2023-27516İstismar yok | An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674.softether · vpn · CWE-453 | Yüksek7,8 | — | %0,5 | 12 Eki 2023 |
31İzleyin | CVE-2019-11868İstismar yok | See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address tosoftether · see.sys · CWE-787 | Yüksek7,8 | — | %0,4 | 29 Tem 2019 |
30İzleyin | CVE-2023-23581İstismar yok | A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02.softether · vpn · CWE-125 | Yüksek7,5 | — | %0,8 | 12 Eki 2023 |
30İzleyin | CVE-2023-25774İstismar yok | A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02.softether · vpn · CWE-400 | Yüksek7,5 | — | %0,7 | 12 Eki 2023 |
30İzleyin | CVE-2023-22308İstismar yok | An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02.softether · vpn · CWE-191 | Yüksek7,5 | — | %0,7 | 12 Eki 2023 |
30İzleyin | CVE-2026-39312İstismar yok | Pre-Auth EAP-TLS DoS on SoftEther VPN Developer Editionsoftether · softethervpn · CWE-789 | Yüksek7,5 | — | %0,7 | 7 Nis 2026 |
29İzleyin | CVE-2023-32634İstismar yok | An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta.softether · vpn · CWE-300 | Yüksek7,4 | — | %0,4 | 12 Eki 2023 |
23İzleyin | CVE-2023-22325İstismar yok | A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 asoftether · vpn · CWE-835 | Orta5,9 | — | %1,0 | 12 Eki 2023 |
22İzleyin | CVE-2025-25566İstismar yok | Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function.softether · vpn · CWE-401 | Orta5,6 | — | %0,3 | 12 Mar 2025 |
21İzleyin | CVE-2023-31192İstismar yok | An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674.softether · vpn · CWE-457 | Orta5,3 | — | %1,0 | 12 Eki 2023 |
21İzleyin | CVE-2024-38520İstismar yok | SoftEther VPN with L2TP - 2.75x Amplificationsoftethervpn · softethervpn · CWE-400 | Orta5,3 | — | %0,5 | 26 Haz 2024 |
17İzleyin | CVE-2023-32275İstismar yok | An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674.softether · vpn · CWE-201 | Orta4,4 | — | %0,4 | 12 Eki 2023 |
- CVE-2025-2556539İzleyin
SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions.
KritikCVSS 9,8İstismar yokEPSS %1softether · vpn12 Mar 2025
- CVE-2025-2556739İzleyin
SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function.
KritikCVSS 9,8İstismar yokEPSS %1softether · vpn12 Mar 2025
- CVE-2025-2556839İzleyin
SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function.
KritikCVSS 9,8İstismar yokEPSS %1softether · vpn12 Mar 2025
- CVE-2023-2739532İzleyin
A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674
YüksekCVSS 8,1İstismar yokEPSS %2softether · vpn12 Eki 2023
- CVE-2023-2751631İzleyin
An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674.
YüksekCVSS 7,8İstismar yokEPSS %1softether · vpn12 Eki 2023
- CVE-2019-1186831İzleyin
See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to
YüksekCVSS 7,8İstismar yokEPSS %0softether · see.sys29 Tem 2019
- CVE-2023-2358130İzleyin
A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02.
YüksekCVSS 7,5İstismar yokEPSS %1softether · vpn12 Eki 2023
- CVE-2023-2577430İzleyin
A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02.
YüksekCVSS 7,5İstismar yokEPSS %1softether · vpn12 Eki 2023
- CVE-2023-2230830İzleyin
An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02.
YüksekCVSS 7,5İstismar yokEPSS %1softether · vpn12 Eki 2023
- CVE-2026-3931230İzleyin
Pre-Auth EAP-TLS DoS on SoftEther VPN Developer Edition
YüksekCVSS 7,5İstismar yokEPSS %1softether · softethervpn7 Nis 2026
- CVE-2023-3263429İzleyin
An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta.
YüksekCVSS 7,4İstismar yokEPSS %0softether · vpn12 Eki 2023
- CVE-2023-2232523İzleyin
A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 a
OrtaCVSS 5,9İstismar yokEPSS %1softether · vpn12 Eki 2023
- CVE-2025-2556622İzleyin
Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function.
OrtaCVSS 5,6İstismar yokEPSS %0softether · vpn12 Mar 2025
- CVE-2023-3119221İzleyin
An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674.
OrtaCVSS 5,3İstismar yokEPSS %1softether · vpn12 Eki 2023
- CVE-2024-3852021İzleyin
SoftEther VPN with L2TP - 2.75x Amplification
OrtaCVSS 5,3İstismar yokEPSS %1softethervpn · softethervpn26 Haz 2024
- CVE-2023-3227517İzleyin
An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674.
OrtaCVSS 4,4İstismar yokEPSS %0softether · vpn12 Eki 2023