cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2022-27595,https://securityvulnerability.io/vulnerability/CVE-2022-27595,Insecure Library Loading Vulnerability in QVPN Device Client,"CVE-2022-27595 is a critical insecurity identified within QNAP's QVPN Device Client, specifically involving an insecure library loading flaw. This vulnerability permits local attackers, who have obtained user-level access, to potentially execute malicious code or commands within the environment. This threat highlights the importance of updating to the latest versions, specifically QVPN Windows 2.0.0.1316 and 2.0.0.1310 or later, to mitigate the risks associated with this vulnerability. For further information, please refer to the official security advisory.",QNAP,Qvpn Windows,7.8,HIGH,0.0004299999854993075,false,false,false,false,,false,false,2024-12-19T01:39:46.448Z,0
CVE-2023-23370,https://securityvulnerability.io/vulnerability/CVE-2023-23370,QVPN Device Client,"An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to user accounts and access sensitive data used by the user account via unspecified vectors.

We have already fixed the vulnerability in the following version:
QVPN Windows 2.1.0.0518 and later
",QNAP,Qvpn Windows,6.7,MEDIUM,0.0004199999966658652,false,false,false,false,,false,false,2023-10-06T17:15:00.000Z,0
CVE-2023-23371,https://securityvulnerability.io/vulnerability/CVE-2023-23371,QVPN Device Client,"A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors.

We have already fixed the vulnerability in the following version:
QVPN Windows 2.2.0.0823 and later
",QNAP,Qvpn Windows,5.2,MEDIUM,0.0004199999966658652,false,false,false,false,,false,false,2023-10-06T17:15:00.000Z,0