CVE-2024-1195

A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The identifier VDB-252685 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-404

• https://vuldb.com/?ctiid.252685Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252685Third Party Advisory, VDB Entry
• https://www.youtube.com/watch?v=JdQMINPVJd8Broken Link
• https://vuldb.com/?ctiid.252685Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252685Third Party Advisory, VDB Entry
• https://www.youtube.com/watch?v=JdQMINPVJd8Broken Link

Published

Feb 2, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11944iXsystems TrueNAS CORE tarfile.extractall Directory Traversa…8.8
• CVE-2024-11945The Email Reminders plugin for WordPress is vulnerable to St…6.4
• CVE-2024-11946iXsystems TrueNAS CORE fetch_plugin_packagesites tar Clearte…6.5
• CVE-2024-11947GFI Archiver Core Service Deserialization of Untrusted Data …8.8
• CVE-2024-11948GFI Archiver Telerik Web UI Remote Code Execution Vulnerabil…9.8
• CVE-2024-11949GFI Archiver Store Service Deserialization of Untrusted Data…8.8
• CVE-2024-11950XnSoft XnView Classic RWZ File Parsing Integer Underflow Rem…8.8
• CVE-2024-11951The Homey Login Register plugin for WordPress is vulnerable …9.8
• CVE-2024-11952The Classic Addons – WPBakery Page Builder plugin for WordPr…7.5
• CVE-2024-11953Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-11954A vulnerability classified as problematic was found in Pimco…4.8
• CVE-2024-11955A vulnerability was found in GLPI up to 10.0.17. It has been…6.1