Lucene search
+L

590 matches found

AlpineLinux
AlpineLinux
added 2021/02/25 8:29 a.m.107 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS6.6AI score0.01554EPSS
SaveExploits0
CVE
CVE
added 2021/02/25 8:29 a.m.393 views

CVE-2020-36254

CVE-2020-36254 : In Dropbear, the SCP client (scp.c) before version 2020.79 mishandles the filename of “.” or an empty filename, related to CVE-2018-20685. Affected: Dropbear releases prior to 2020.79. Impact and exploit details are not provided beyond the filename handling issue in scp. Remediat...

8.1CVSS6.3AI score0.01554EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2021/02/25 8:29 a.m.3 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.6AI score0.01554EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2021/02/25 8:29 a.m.75 views

CVE-2020-36254

scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685...

8.1CVSS6.8AI score0.01554EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/02/25 12:0 a.m.11 views

Perth Dropbear Security Vulnerability

Perth Dropbear is a lightweight SSH server/client software from the University of Perth, Australia that is primarily used in embedded devices. A security vulnerability exists in Dropbear before 2020.79 that stems from incorrectly processed filenames, or empty filenames...

8.1CVSS7.3AI score0.01554EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/02/25 12:0 a.m.11 views

PT-2021-11987 · Dropbear +1 · Dropbear +1

Name of the Vulnerable Software and Affected Versions: Dropbear versions prior to 2020.79 Description: The issue is related to the handling of filenames in scp.c, specifically with . or an empty filename. This is a related issue to a previously known problem. Recommendations: For versions prior t...

10CVSS6.6AI score0.93305EPSS
SaveExploits4References25
OSV
OSV
added 2021/02/01 2:15 a.m.8 views

CVE-2020-15833

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

9.8CVSS7.2AI score0.01648EPSS
SaveExploits0References2
NVD
NVD
added 2021/02/01 2:15 a.m.16 views

CVE-2020-15833

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

10CVSS9.3AI score0.01648EPSS
SaveExploits0References2
Prion
Prion
added 2021/02/01 2:15 a.m.17 views

Hardcoded credentials

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

10CVSS9.2AI score0.01648EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/02/01 1:39 a.m.22 views

CVE-2020-15833

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner...

9.4AI score0.01648EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/02/01 12:0 a.m.8 views

PT-2021-9837 · Mofi Network +1 · Mofi4500-4Gxelte +1

Name of the Vulnerable Software and Affected Versions: Mofi Network MOFI4500-4GXeLTE version 4.1.5-std Description: An issue was discovered where the Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom...

10CVSS6.6AI score0.93305EPSS
SaveExploits4References20
CNNVD
CNNVD
added 2021/01/31 12:0 a.m.8 views

Mofi Network MOFI4500-4GXeLTE 信任管理问题漏洞

The Mofi Network MOFI4500-4GXeLTE is a wireless router from Mofi Network. A security vulnerability exists in the Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The vulnerability stems from the fact that the Dropbear SSH daemon has been modified to accept an alternate hardcoded path to a public...

10CVSS7.1AI score0.01648EPSS
SaveExploits0References3
NVD
NVD
added 2020/12/30 8:15 p.m.32 views

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

5.3CVSS5.1AI score0.01179EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/30 8:15 p.m.3 views

DEBIAN-CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

5.3CVSS7.2AI score0.01179EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/30 8:15 p.m.7 views

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

5.3CVSS5.2AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/12/30 8:15 p.m.51 views

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

5.3CVSS6.8AI score0.01179EPSS
SaveExploits0References3
Prion
Prion
added 2020/12/30 8:15 p.m.29 views

Design/Logic Flaw

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

5CVSS5.1AI score0.02686EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2020/12/30 8:15 p.m.13 views

UBUNTU-CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

5.3CVSS6.8AI score0.01179EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2020/12/30 7:33 p.m.51 views

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

5.1AI score0.01179EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2020/12/30 7:33 p.m.66 views

CVE-2019-12953

Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599...

5.3CVSS5.6AI score0.01179EPSS
SaveExploits0
Rows per page
Query Builder