31 matches found
Photon OS 5.0: Openssh PHSA-2026-5.0-91-0830
An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0830. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Important: Red Hat Security Advisory: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
RockyLinux 10 : openssh (RLSA-2026:19069)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:19069 advisory. OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode CVE-2026-35385 OpenSSH: OpenSSH: Security bypass via...
openssh security update
An update is available for openssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
openssh security update
An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
Unity Linux 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-016486)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016486 advisory. OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. Tenable has extracted the preceding description block directly...
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
...
Linux Distros Unpatched Vulnerability : CVE-2026-35388
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. CVE-2026-35388 Note that Nessus relies on the presence of t...
CVE-2026-35388
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions...
CVE-2026-35388
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions...
CVE-2026-35388
OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions...
MAL-2025-35388 Malicious code in test-mlw2-gambs-unmew-pekan-heils (npm)
The package test-mlw2-gambs-unmew-pekan-heils was found to contain malicious code...
CVE-2021-35388
Hospital Management System v 4.0 is vulnerable to Cross Site Scripting XSS via /hospital/hms/admin/patient-search.php...
CVE-2020-35388
rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...
CVE-2024-35388
TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...
CVE-2024-35388
TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...
CVE-2024-35388
The TOTOLINK NR1800X (version v9.1.0u.6681_B20230703 ) contains a stack-based buffer overflow vulnerability. The root cause is the urldecode function's failure to properly validate the input data length for the password parameter. This flaw allows an attacker to potentially execute arbitrary code...
CVE-2024-35388
TOTOLINK NR1800X v9.1.0u.6681B20230703 was discovered to contain a stack overflow via the password parameter in the function urldecode...
