private internet access vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

The London Trust Media Private Internet Access (PIA) application prior to 1.3.3.1 for Android allows remote malicious users to cause a denial of service (application crash) via a large VPN server-list file.

Londontrustmedia Private Internet Access

7.2

CVSSv2

A vulnerability in London Trust Media Private Internet Access (PIA) VPN Client v77 for Windows could allow an unauthenticated, local malicious user to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The &q...

Londontrustmedia Private Internet Access 77

5

CVSSv2

A vulnerability in the Private Internet Access (PIA) VPN Client for Linux 1.5 up to and including 2.3+ allows remote malicious users to bypass an intended VPN kill switch mechanism and read sensitive information via intercepting network traffic. Since 1.5, PIA has supported a &ld...

Privateinternetaccess Private Internet Access Vpn Client

2.6

CVSSv2

Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote malicious users to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vuln...

Microsoft Internet Explorer 10 Microsoft Edge Microsoft Internet Explorer 11

1 EDB exploit

6.8

CVSSv2

Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote malicious users to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vuln...

Microsoft Internet Explorer 11 Microsoft Edge -Microsoft Internet Explorer 10

1 EDB exploit

10

CVSSv2

The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote malicious users to bypass NTLM and basic authentication mechanisms and access private web dire...

Microsoft Internet Information Services 5.0

1 EDB exploit

7.5

CVSSv2

Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote malicious users to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP he...

Microsoft Internet Explorer 6.0

1 EDB exploit

NA

A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote malicious user to retrieve an RSA private key. This vulnerability is due to a l...

Cisco Adaptive Security Appliance Software Cisco Firepower Threat Defense

1 Github repository

6.4

CVSSv2

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote malicious users to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935.

Cisco Unified Meetingplace 6.0 Cisco Unified Meetingplace 6.0.170.0 Cisco Unified Meetingplace 6.0.244

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook