Vulnerabilities (CVE)

Filtered by CWE-428
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-4173 1 Sonicwall 1 Netextender 2020-08-05 6.9 MEDIUM N/A
Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder.
CVE-2014-5455 2 Openvpn, Privatetunnel 2 Openvpn, Privatetunnel 2020-06-01 6.9 MEDIUM N/A
Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.