CVE-2020-10364

The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management...

CVE-2025-10364

creationtimestamp| type| source ---|---|--- 2025-09-12 15:20:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lynktoey6p2o 2025-09-13 01:32:02+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lyomye7aze2w...

CVE-2019-10364

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log...

MikroTik RouterOS Allocation of Resources Without Limits or Throttling (CVE-2020-10364)

The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management. This plugin only works with Tenable.ot. Plea...

SUSE CVE-2016-10364

With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions...

org.jenkins-ci.plugins:ec2-cloud-axis (>=1.0 <=1.2) potentially affected by CVE-2019-10364 via org.jenkins-ci.plugins:ec2 (=1.19)

org.jenkins-ci.plugins:ec2 MAVEN version =1.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:ec2 and may be impacted: - org.jenkins-ci.plugins:ec2-cloud-axis =1.0, =1.2 Source cves: CVE-2019-10364 Source advisory:...

CVE-2020-10364

The vulnerability CVE-2020-10364 affects MikroTik RouterOS (SSh daemon) up to v6.44.3. The root cause is uncontrolled resource management in the SSH daemon, which can allow remote attackers to generate CPU activity, cause denial of new authorized connections, and reboot the device via connect and...

CVE-2019-10364

Jenkins Amazon EC2 Plugin 1.43 and earlier wrote the beginning of private keys to the Jenkins system log...

CVE-2019-10364

CVE-2019-10364 affects the Jenkins Amazon EC2 Plugin up to and including version 1.43. The issue arises because the plugin writes the beginning of private keys to the Jenkins system log, which could expose sensitive information. The Red Hat and PT-Security entries corroborate this behavior and no...

CVE-2018-1000522

CVE-2018-1000522 is a reservation duplicate of CVE-2018-10364 and, per linked records, relates to a Cross-Site Scripting issue in BigTree CMS prior to version 4.2.22. The root cause is an XSS vulnerability on the Users management page via the name or company field. Affected product: BigTree CMS; ...

CVE-2018-10364

BigTree before 4.2.22 has XSS in the Users management page via the name or company field...

Elastic Kibana X-Pack 'CVE-2016-10364' Insufficient Access Restriction Vulnerability - Linux

Elastic Kibana with X-Pack is prone to an insufficient access restriction vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Elastic Kibana X-Pack 'CVE-2016-10364' Insufficient Access Restriction Vulnerability - Windows

Elastic Kibana with X-Pack is prone to an insufficient access restriction vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-10364

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Updates Environment Mgmt. Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2017-10364

Technical details about CVE-2017-10364 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-10364

With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those services regardless of their own permissions...

CVE-2016-10364

CVE-2016-10364 affects Elastic Kibana with X-Pack. The vulnerability is described as an improper authentication/insufficient access restriction in Kibana 5.0.0 and 5.0.1, where any authenticated user could issue requests to the advanced settings and short URL services regardless of permissions. T...