25481 matches found
PT-2025-40939
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.1 Alma Linux affected versions not specified SUSE affected versions not specified IBM AIX affected versions not specified Fortinet FortiWeb affected versions not specified Description OpenSSH before version 10.1...
PT-2025-40940
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.1 Description OpenSSH contains a flaw where the '0' character within an ssh:// URI can be processed, potentially leading to code execution when a ProxyCommand is utilized. This occurs because the presence of a null...
CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
RockyLinux 10 : mod_http2 (RLSA-2025:14625)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:14625 advisory. httpd: modproxyhttp2: untrusted input from a client causes an assertion to fail in the Apache modproxyhttp2 module CVE-2025-49630 Tenable has extracted the...
CVE-2025-61985
CVE-2025-61985 affects OpenSSH prior to 10.1. The flaw allows a null character ('\0') in an ssh:// URI to enable potential code execution when a ProxyCommand is used. Affected products/versions are OpenSSH before 10.1; the CVSS base score is 3.6 (LOW) with LOCAL access and high attack complexity ...
RockyLinux 10 : mod_proxy_cluster (RLSA-2025:9466)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9466 advisory. modproxycluster: modproxycluster unauthorized MCMP requests CVE-2024-10306 Tenable has extracted the preceding description block directly from the RockyLinux...
CVE-2025-61984
CVE-2025-61984 affects OpenSSH before 10.1. It allows control characters in usernames originating from untrusted sources (command line or %-sequence expansion in a config file), potentially enabling code execution when a ProxyCommand is used. A config file that provides a complete literal usernam...
CVE-2025-61985
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used...
CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
RockyLinux 9 : mod_proxy_cluster (RLSA-2025:9434)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9434 advisory. modproxycluster: modproxycluster unauthorized MCMP requests CVE-2024-10306 Tenable has extracted the preceding description block directly from the RockyLinux...
BIT-PYTORCH-2025-55553
A syntax error in the component proxytensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service DoS...
RLSA-2025:9434 Moderate: mod_proxy_cluster security update
The modproxycluster module is a plugin for the Apache HTTP Server that provides load-balancer functionality. Security Fixes: modproxycluster: modproxycluster unauthorized MCMP requests CVE-2024-10306 For more details about the security issues, including the impact, a CVSS score, acknowledgments,...
SUSE CVE-2025-11230
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests...
EUVD-2023-39927
Malicious code in bioql PyPI...
EUVD-2025-25216
Malicious code in bioql PyPI...
EUVD-2025-14189
Malicious code in bioql PyPI...
EUVD-2024-27020
Malicious code in bioql PyPI...
EUVD-2023-31256
Malicious code in bioql PyPI...