Browse CVEs

HIGH 7.5 CVE-2026-39312 SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerabi… Softethervpn after 5.2.5188 Fix from $1,9502026-04-07 CRITICAL 9.8 CVE-2025-25565 SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in the Command.c file via the PtMakeCert and PtMakeCert2048 functions. NOTE: the Supplier di… Vpn No fix yet Fix from $2,3002025-03-12 CRITICAL 9.8 CVE-2025-25567 SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function. NOTE: the Supplier disputes this beca… Vpn No fix yet Fix from $2,3002025-03-12 CRITICAL 9.8 CVE-2025-25568 SoftEtherVPN 5.02.5187 is vulnerable to Use after Free in the Command.c file via the CheckNetworkAcceptThread function. NOTE: the Supplier disputes t… Vpn No fix yet Fix from $2,3002025-03-12 MEDIUM 5.6 CVE-2025-25566 Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function. NOTE: the Suppl… Vpn No fix yet Fix from $1,6002025-03-12 HIGH 8.1 CVE-2023-27395 A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02… Vpn Patch available Fix from $1,9502023-10-12 HIGH 7.8 CVE-2023-27516 An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted… Vpn Patch available Fix from $1,9502023-10-12 HIGH 7.5 CVE-2023-25774 A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. A set of specially crafted network … Vpn No fix yet Fix from $1,9502023-10-12 HIGH 7.4 CVE-2023-32634 An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can… Vpn Patch available Fix from $1,9502023-10-12 MEDIUM 5.3 CVE-2023-31192 An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet ca… Vpn Patch available Fix from $1,6002023-10-12 HIGH 7.5 CVE-2023-23581 A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially cra… Vpn No fix yet Fix from $1,9502023-10-12 MEDIUM 5.9 CVE-2023-22325 A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. … Vpn Patch available Fix from $1,6002023-10-12 HIGH 7.5 CVE-2023-22308 An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted netw… Vpn No fix yet Fix from $1,9502023-10-12 HIGH 7.8 CVE-2019-11868 See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which ar… See.sys after 4.25 Fix from $1,9502019-07-29