JLSEC-2026-1086 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow...

libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2ciphercrypt function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit...

Cato Networks Windows SDP Client 代码问题漏洞

Cato Networks Windows SDP Client is a secure remote access software from Cato Networks, Israel. A code issue vulnerability exists in Cato Networks Windows SDP Client versions prior to 5.10.34, which stems from the ability to implement a local elevation of privilege via an openssl configuration fi...

LibVNCServer code issue vulnerability (CNVD-2020-36782)

LibVNCServer is a cross-platform C library that supports the implementation of VNC Virtual Network Computing server or client functionality in a program. A code issue vulnerability exists in the libvncclient/tlsopenssl.c file in versions of LibVNCServer prior to 0.9.13. A remote attacker could...