Lucene search
K

35 matches found

RedhatCVE
RedhatCVE
added 2026/01/14 12:18 a.m.3 views

CVE-2024-54855

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts...

6.4CVSS7.4AI score0.00069EPSS
Exploits1References1
NVD
NVD
added 2026/01/13 4:15 p.m.1 views

CVE-2024-54855

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts...

6.4CVSS0.00069EPSS
Exploits1References3
OSV
OSV
added 2026/01/13 4:15 p.m.0 views

CVE-2024-54855

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts...

6.4CVSS5.5AI score
Exploits0References3
Cvelist
Cvelist
added 2026/01/13 12:0 a.m.18 views

CVE-2024-54855

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts...

0.00069EPSS
Exploits1References3
CVE
CVE
added 2026/01/13 12:0 a.m.5 views

CVE-2024-54855

The CVE affects Vanilla OS 2 Core image v1.1.0, where SSH service uses static keys baked into the image. This root cause enables potential man‑in‑the‑middle attacks on SSH connections to other hosts. Documented across NVD/Red Hat/CNNVD/CVE listings; no explicit remediation or patch version is pro...

6.4CVSS7AI score0.00069EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.3 views

PT-2026-2433

Name of the Vulnerable Software and Affected Versions fabricators Ltd Vanilla OS 2 Core image version 1.1.0 Description The software contains static keys for the SSH service. This may allow attackers to execute a man-in-the-middle attack during connections with other hosts. Recommendations At the...

6.4CVSS5.4AI score0.00069EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/01/13 12:0 a.m.2 views

CVE-2024-54855

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts...

7AI score0.00069EPSS
Exploits1References3
EUVD
EUVD
added 2026/01/13 12:0 a.m.2 views

EUVD-2024-55374

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts...

6.4CVSS6.8AI score0.00069EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.2 views

Vanilla OS 2 Core image 安全漏洞

Vanilla OS 2 Core image is an open source base system image for Vanilla OS. A security vulnerability exists in Vanilla OS 2 Core image version v1.1.0, which stems from the use of static keys by the SSH service and could lead to a man-in-the-middle attack...

6.4CVSS5.8AI score0.00069EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2016-5666

Malware in sbrugna...

7.8CVSS7.8AI score0.00509EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/09/26 12:0 a.m.2 views

PT-2023-8423 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 iOS versions prior to 16.7 iPadOS versions prior to 16.7 Description: The issue is related to the handling of temporary files, which may allow an app to access edited photos saved to a temporary directory. This coul...

5.5CVSS4.9AI score0.00061EPSS
Exploits0References7
Apple
Apple
added 2023/09/21 12:0 a.m.65 views

About the security content of iOS 16.7 and iPadOS 16.7

About the security content of iOS 16.7 and iPadOS 16.7 This document describes the security content of iOS 16.7 and iPadOS 16.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

8.8CVSS9.3AI score0.24165EPSS
Exploits3References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2017/05/26 12:0 a.m.49 views

Mac OS X 10.10.5 / 10.11.6 Multiple Vulnerabilities (Security Update 2016-002 / 2016-006)

The remote host is running a version of Mac OS X that is 10.10.5 but is missing Security Update 2016-006, or else it is version 10.11.6 but is missing Security Update 2016-002. It is, therefore, affected by multiple vulnerabilities : - A memory corruption issue exists in the AppleGraphicsControl...

9.3CVSS7.1AI score0.30426EPSS
Exploits5References9
Apple
Apple
added 2017/03/31 10:56 a.m.57 views

About the security content of macOS Sierra 10.12.1, Security Update 2016-002 El Capitan, and Security Update 2016-006 Yosemite - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

9.3CVSS0.6AI score0.30426EPSS
Exploits5Affected Software7
OSV
OSV
added 2017/02/20 8:59 a.m.1 views

CVE-2016-4681

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG file...

7.8CVSS6.1AI score0.00509EPSS
Exploits0References2
NVD
NVD
added 2017/02/20 8:59 a.m.19 views

CVE-2016-4681

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG file...

7.8CVSS7.7AI score0.00509EPSS
Exploits0References2
Prion
Prion
added 2017/02/20 8:59 a.m.18 views

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG file...

6.8CVSS8.1AI score0.00509EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2017/02/20 8:35 a.m.66 views

CVE-2016-4681

CVE-2016-4681 affects macOS prior to 10.12.1, specifically the Core Image component. A memory corruption flaw occurs when processing crafted JPEG files, allowing an unauthenticated remote attacker to execute arbitrary code or cause an application crash via a malicious image. The issue is disclose...

7.8CVSS7.8AI score0.00509EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/02/20 8:35 a.m.27 views

CVE-2016-4681

An issue was discovered in certain Apple products. macOS before 10.12.1 is affected. The issue involves the "Core Image" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted JPEG file...

7.7AI score0.00509EPSS
Exploits0References2
CNVD
CNVD
added 2016/11/24 12:0 a.m.2 views

Apple macOS Sierra Core Image Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers, and Core Image is one of the graphical considerations framework. A memory corruption vulnerability exists in Core Image in Apple macOS Sierra versions prior to 10.12.1. A remote attacker can exploit this...

7.8CVSS7.7AI score0.00509EPSS
Exploits0References1
Rows per page
Query Builder