Lucene search
+L

6605 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.39 views

Security Bulletin: Vulnerabilities in ntp, libxml2, openssh, sqlite and python-base affect IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities. Vulnerability Details: CVEID: CVE-2016-4953 Description: NTP is vulnerable ...

7.5CVSS8.4AI score0.44936EPSS
SaveExploits10
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.52 views

Security Bulletin: Vulnerabilities affect IBM's Advanced Management Module (AMM)

Summary Multiple vulnerabilities affect IBM's Advance Management Module AMM. Vulnerability Details Abstract Multiple vulnerabilities affect IBM's Advance Management Module AMM. Content Vulnerability Details: CVE-ID: CVE-2014-2653 Description: OpenSSH could allow a remote attacker to bypass securi...

8.5CVSS8.9AI score0.51436EPSS
SaveExploits18
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.65 views

Security Bulletin: Vulnerability in OpenSSH affects IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter (CVE-2015-5600)

Summary IBM Flex System FC43171 8Gb SAN Switch and SAN Pass-thru, QLogic 8Gb Intelligent Pass-thru Module and SAN Switch Module and QLogic Virtual Fabric Extension Module for IBM BladeCenter have addressed the following CVE. Vulnerability Details Summary IBM Flex System FC43171 8Gb SAN Switch and...

8.5CVSS5.3AI score0.09377EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.61 views

Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Management Module (IMM) for System x & BladeCenter

Summary IBM Integrated Management Module IMM for System x & BladeCenter has addressed the following vulnerabilities in OpenSSH. Vulnerability Details Summary IBM Integrated Management Module IMM for System x & BladeCenter has addressed the following vulnerabilities in OpenSSH. Vulnerability...

7.8CVSS7.4AI score0.58568EPSS
SaveExploits5
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.33 views

Security Bulletin: Vulnerabilities in OpenSSH affect IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru Firmware and QLogic Virtual Fabric Extension Module for IBM BladeCenter (CVE-2016-0777, CVE-2016-0778)

Summary An information leak flaw and buffer overflow flaw in the way the OpenSSH client roaming feature was implemented affects IBM Flex System FC3171 8Gb SAN Switch and SAN Pass-thru Firmware and QLogic Virtual Fabric Extension Module for IBM BladeCenter. Vulnerability Details Summary An...

8.1CVSS7.8AI score0.63468EPSS
SaveExploits3Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2023/04/14 2:32 p.m.54 views

Security Bulletin: Vulnerabilities in OpenSSH affect IBM BladeCenter Advanced Management Module (AMM)

Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in OpenSSH. Vulnerability Details Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in HTTPD. Vulnerability Details CVEID: CVE-2016-10011 Description...

7.8CVSS8.4AI score0.88944EPSS
SaveExploits23
F5 Networks
F5 Networks
added 2023/04/14 7:21 a.m.53 views

K000133517: OpenSSH vulnerability CVE-2023-28531

Security Advisory Description ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9. CVE-2023-28531 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory...

9.8CVSS6.5AI score0.02267EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.79 views

Security Bulletin: Vulnerabilities in OpenSSH affect SAN Volume Controller and Storwize Family (CVE-2015-6563 CVE-2015-6564)

Summary OpenSSH vulnerabilities were disclosed in May 2016 by the OpenSSH Project. OpenSSH is used by SAN Volume Controller and Storwize Family in its CLI. SAN Volume Controller and Storwize Family products have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-6563 DESCRIPTION...

6.9CVSS7.4AI score0.00604EPSS
SaveExploits0Affected Software5
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.66 views

Security Bulletin: Vulnerability in OpenSSH affects IBM SAN Volume Controller, IBM Storwize and IBM FlashSystem products (CVE-2016-10708)

Summary A vulnerability in the OpenSSH component affects the Command Line Interface of IBM SAN Volume Controller, IBM Storwize and IBM FlashSystem products. Vulnerability Details CVEID: CVE-2016-10708 DESCRIPTION: OpenSSH is vulnerable to a denial of service, caused by a NULL pointer dereference...

7.5CVSS6.7AI score0.15716EPSS
SaveExploits1Affected Software6
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.30 views

Security Bulletin: Vulnerabilities in bash affect SAN Volume Controller and Storwize Family (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Security Bulletin: Vulnerabilities in Bash affect SAN Volume Controller and Storwize Family CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278 Vulnerability Details Security Bulletin --- Summary --- Six Bash vulnerabilities were disclosed in September...

10CVSS9.2AI score0.99999EPSS
SaveExploits165
IBM Security Bulletins
IBM Security Bulletins
added 2023/03/29 1:48 a.m.88 views

Security Bulletin: Multiple vulnerabilities in OpenSSH affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products

Summary Vulnerabilities in OpenSSH affect IBM SAN Volume Controller, IBM Storwize V7000, V5000, V3700 and V3500, IBM Spectrum Virtualize Software, IBM Spectrum Virtualize for Public Cloud and IBM FlashSystem V9000 products. OpenSSH is used in the Command Line Interface. The applicable CVEs are...

7.8CVSS7.1AI score0.88944EPSS
SaveExploits17Affected Software7
Tenable Nessus
Tenable Nessus
added 2023/03/24 12:00 a.m.73 views

Siemens SCALANCE X-200RNA Switch Devices Path Traversal (CVE-2019-6111)

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned only directory traversal attacks are prevented...

5.9CVSS7.1AI score0.58204EPSS
SaveExploits9References22
Tenable Nessus
Tenable Nessus
added 2023/03/24 12:00 a.m.219 views

OpenSSH < 9.3 Multiple Vulnerabilities

The version of OpenSSH installed on the remote host is prior to 9.3. It is, therefore, affected by multiple vulnerabilities as referenced in the release-9.3 advisory. - ssh-add1: when adding smartcard keys to ssh-agent1 with the per-hop destination constraints ssh-add -h ... added in OpenSSH 8.9,...

9.8CVSS6.5AI score0.02267EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/03/18 3:38 a.m.9 views

SUSE CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS6.7AI score0.02267EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2023/03/17 12:43 p.m.117 views

CVE-2023-28531

A vulnerability was found in openssh. This issue occurs when adding smartcard keys to ssh-agent1 with per-hop destination constraints. A logic error prevented the constraints from being communicated to the agent, resulting in the keys being added without constraints. The common cases of...

9.1CVSS8.8AI score0.02267EPSS
SaveExploits0References4
OSV
OSV
added 2023/03/17 4:15 a.m.12 views

AZL-25662 CVE-2023-28531 affecting package openssh for versions less than 8.9p1-5

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS6.6AI score0.02267EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/17 4:15 a.m.51 views

CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS9.3AI score0.02267EPSS
SaveExploits0References8
OSV
OSV
added 2023/03/17 4:15 a.m.7 views

ALPINE-CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS6.9AI score0.02267EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/17 4:15 a.m.206 views

CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS6.8AI score
SaveExploits0References6
OSV
OSV
added 2023/03/17 4:15 a.m.5 views

DEBIAN-CVE-2023-28531

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9...

9.8CVSS7.6AI score0.02267EPSS
SaveExploits0References1
Rows per page
Query Builder