[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkqQ_amtF_Z3VF1oSU28sJwRHCNa9zcgaL7w5FDDWlGQ":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":76,"topProductsByCves":77,"seoMetadata":79,"meta":88},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":19},35950,"xelerance",1,16,0,112,"2019-06-12","x",[16],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},173202,"openswan","Xelerance is a technology vendor with 1 tracked product and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[21,30,37,41,47,52,56,62,67,71],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":28,"epssScore":29},"CVE-2005-3671","The Internet Key Exchange version 1 (IKEv1) implementation in Openswan 2 (openswan-2) before 2.4.4, and freeswan in SUSE LINUX 9.1 before 2.04_1.5.4-1.23, allow remote attackers to cause a denial of service via (1) a crafted packet using 3DES with an invalid key length, or (2) unspecified inputs when Aggressive Mode is enabled and the PSK is known, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.","2005-11-18",7.8,"v2","High",false,0.07453,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":36},"CVE-2010-3308","Buffer overflow in programs\u002Fpluto\u002Fxauth.c in the client in Openswan 2.6.26 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via a long cisco_banner (aka server_banner) field.","2010-10-05",6.5,"Medium",0.04034,{"cveId":38,"description":39,"publishedDate":33,"cvssScore":34,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":40},"CVE-2010-3302","Buffer overflow in programs\u002Fpluto\u002Fxauth.c in the client in Openswan 2.6.25 through 2.6.28 might allow remote authenticated gateways to execute arbitrary code or cause a denial of service via long (1) cisco_dns_info or (2) cisco_domain_info data in a packet.",0.03892,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":46},"CVE-2009-0790","The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 before 2.8.9, allows remote attackers to cause a denial of service (daemon crash and restart) via a crafted (1) R_U_THERE or (2) R_U_THERE_ACK Dead Peer Detection (DPD) IPsec IKE Notification message that triggers a NULL pointer dereference related to inconsistent ISAKMP state and the lack of a phase2 state association in DPD.","2009-04-01",5,0.03205,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":45,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":51},"CVE-2013-6466","Openswan 2.6.39 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.","2014-01-26",0.02664,{"cveId":53,"description":54,"publishedDate":33,"cvssScore":34,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":55},"CVE-2010-3752","programs\u002Fpluto\u002Fxauth.c in the client in Openswan 2.6.25 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in (1) cisco_dns_info or (2) cisco_domain_info data in a packet, a different vulnerability than CVE-2010-3302.",0.02465,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":61},"CVE-2013-2053","Buffer overflow in the atodn function in Openswan before 2.6.39, when Opportunistic Encryption is enabled and an RSA key is being used, allows remote attackers to cause a denial of service (pluto IKE daemon crash) and possibly execute arbitrary code via crafted DNS TXT records.  NOTE: this might be the same vulnerability as CVE-2013-2052 and CVE-2013-2054.","2013-07-09",6.8,0.02447,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":45,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":66},"CVE-2014-2037","Openswan 2.6.40 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.  NOTE: this vulnerability exists because of an incomplete fix for CVE 2013-6466.","2014-11-26",0.02427,{"cveId":68,"description":69,"publishedDate":33,"cvssScore":34,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":70},"CVE-2010-3753","programs\u002Fpluto\u002Fxauth.c in the client in Openswan 2.6.26 through 2.6.28 allows remote authenticated gateways to execute arbitrary commands via shell metacharacters in the cisco_banner (aka server_banner) field, a different vulnerability than CVE-2010-3308.",0.02409,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":45,"cvssVersion":26,"severity":35,"isKev":28,"epssScore":75},"CVE-2009-2185","The ASN.1 parser (pluto\u002Fasn1.c, libstrongswan\u002Fasn1\u002Fasn1.c, libstrongswan\u002Fasn1\u002Fasn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.","2009-06-25",0.02372,[],[78],{"id":17,"product_name":18,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Xelerance - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Xelerance covering 1 product with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Xelerance vulnerabilities, Xelerance security, Xelerance CVE, Xelerance threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87},"https:\u002F\u002Fschema.org","Organization","Xelerance","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fxelerance",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":89,"apiVersion":90},"2026-10-18T23:52:48.671Z","3.0"]