383 matches found
CVE-2026-48795
creationtimestamp| type| source ---|---|--- 2026-07-16 00:27:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqpy2lqb3e2s...
ROOT-APP-PYPI-CVE-2023-48795 CVE-2023-48795 in rootio-paramiko - Patched by Root
Root has patched CVE-2023-48795 in the rootio-paramiko package for Root:PyPI. Multiple fixed versions available...
RHCOS 4 : OpenShift Container Platform 4.14.30 (RHSA-2024:3918)
The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3918 advisory. - ssh: Prefix truncation attack on Binary Packet Protocol BPP CVE-2023-48795 Note that Nessus has not tested for this issue but has instead...
Security Bulletin: DevOps Test Performance contains a vulnerability related to use Apache CXF
Summary Due to use of Apache CXF, DevOps Test Performance and Rational Performance Tester contain a potential Denial of Service DoS vulnerability. Vulnerability Details CVEID:CVE-2025-23184 DESCRIPTION: A potential denial of service vulnerability is present in versions of Apache CXF before 3.5.10...
Photon OS 4.0: Openssh PHSA-2026-4.0-0985
An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0985. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Mageia: Security Advisory (MGASA-2026-0066)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated trilead-ssh2 packages fix security vulnerabilities
CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack...
Palo Alto Networks Prisma SD-WAN ION 5.6.x < 5.6.19 / 6.1.x < 6.1.8 / 6.2.x / 6.3.x < 6.3.2 SSH Prefix Truncation (Terrapin) (CVE-2023-48795)
The version of the remote Palo Alto Networks Prisma SD-WAN ION device is 5.6.x prior to 5.6.19, 6.1.x prior to 6.1.8, 6.2.x, or 6.3.x prior to 6.3.2. It is, therefore, affected by an SSH prefix truncation vulnerability known as Terrapin: - The SSH transport protocol with certain OpenSSH extension...
CVE-2023-48795 affecting package rust for versions less than 1.90.0-1
CVE-2023-48795 affecting package rust for versions less than 1.90.0-1. An upgraded version of the package is available that resolves this issue...
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by incorrect validation of integrity check due to OpenSSH
Summary OpenSSH is used by IBM Operations Analytics - Log Analysis as part of implementations of SSH servers and clients. CVE-2023-48795. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other...
Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM
Summary Multiple vulnerabilities were addressed in IBM QRadar SIEM version 7.5.0 UP14 IF02 Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrit...
Advisory ROSA-SA-2025-3107
Software: libssh 0.9.6 OS: ROSA Virtualization 2.1 packageevrstring: libssh-0.9.6-14.rv3 CVE-ID: CVE-2023-48795 BDU-ID: 2023-08853 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the SSH protocol implementation is related to the ability to adjust packet sequence numbers during the connection...
Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-48795 CVE-2025-48913)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerabilities Vulnerability Details CVEID:CVE-2025-48795 DESCRIPTION: Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses cxf-core-3.6.5.jar which is vulnerable to CVE-2025-48795.
Summary IBM Maximo Application Suite - Monitor Component uses cxf-core-3.6.5.jar which is vulnerable to CVE-2025-48795. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-48795 DESCRIPTION: Apache CXF stores large stream based...
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Information Disclosure (CVE-2025-48795)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the information disclosure vulnerability. Please apply the remediated versions described below. Vulnerability Details CVEID:CVE-2025-48795 DESCRIPTION: Apache CXF stores large stream based messages as temporary files...
TencentOS Server 4: openssh (TSSA-2024:0950)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0950 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
HPESBNW04973 rev.1 - HPE Telco Service Activator, Multiple Vulnerabilities
Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Activator =10.3.3 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-48795 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L | 5.6 | ...
Advisory ROSA-SA-2025-3074
Software: openssh 8.0p1 OS: ROSA Virtualization 2.1 unaffected versions = openssh-8.0p1-26.0.1.1.rv3 affected versions openssh-8.0p1-26.0.1.1.rv3 CVE-ID: CVE-2020-15778 BDU-ID: CVE-Crit: HIGH CVE-DESC.: A vulnerability in the toremote scp.c function of the OpenSSH cryptographic security tool exis...
CVE-2023-48795 affecting package podman for versions less than 5.6.1-2
CVE-2023-48795 affecting package podman for versions less than 5.6.1-2. An upgraded version of the package is available that resolves this issue...