Lucene search
+L

7782 matches found

SUSE CVE
SUSE CVE
•added 2024/04/27 3:04 a.m.•11 views

SUSE CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

7.5CVSS9.3AI score0.00307EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2024/04/26 6:04 a.m.•65 views

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

7.5CVSS7AI score0.01355EPSS
SaveExploits1References3
osv_ghsa
osv_ghsa
•added 2024/04/26 12:30 a.m.•175 views

GHSA-6C5P-J8VQ-PQHJ python-jose algorithm confusion with OpenSSH ECDSA keys

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

9.3CVSS7AI score0.00307EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2024/04/26 12:30 a.m.•195 views

python-jose algorithm confusion with OpenSSH ECDSA keys

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.5CVSS7.1AI score0.00307EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2024/04/26 12:15 a.m.•71 views

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.5CVSS7.4AI score0.00307EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2024/04/26 12:15 a.m.•8 views

DEBIAN-CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.5CVSS6.5AI score0.00307EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2024/04/26 12:15 a.m.•38 views

PYSEC-2024-232

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

9.3CVSS7.5AI score0.00307EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2024/04/26 12:15 a.m.•80 views

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.5CVSS6.8AI score0.00307EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2024/04/26 12:15 a.m.•20 views

UBUNTU-CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.5CVSS6.7AI score0.00307EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2024/04/26 12:00 a.m.•312 views

CentOS 9 : openssh-8.7p1-38.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the openssh-8.7p1-38.el9 build changelog. - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass...

5.9CVSS7.1AI score0.93547EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
•added 2024/04/26 12:00 a.m.•39 views

CentOS 9 : libssh-0.10.4-12.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the libssh-0.10.4-12.el9 build changelog. - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to...

5.9CVSS7.3AI score0.93547EPSS
SaveExploits4References4
Mend
Mend
•added 2024/04/25 12:00 a.m.•4 views

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.9CVSS0.00307EPSS
SaveExploits1References13
Vulnrichment
Vulnrichment
•added 2024/04/25 12:00 a.m.•45 views

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.7AI score0.00307EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/25 12:00 a.m.•7 views

CVE-2024-33663: Use of a Broken or Risky Cryptographic Algorithm

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.5CVSS6.5AI score0.00307EPSS
SaveExploits1References2
CVE
CVE
•added 2024/04/25 12:00 a.m.•237 views

CVE-2024-33663

The python-jose library (versions through 3.5.0 ) is vulnerable to algorithm confusion during HMAC initialization. The root cause is a failure to properly validate asymmetric keys, specifically accepting DER-encoded public keys that lack PEM armor or SSH prefixes. This allows an attacker possessi...

6.5CVSS7.3AI score0.00307EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2024/04/25 12:00 a.m.•66 views

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.5CVSS7.4AI score0.00222EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/04/25 12:00 a.m.•123 views

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

6.5CVSS7.2AI score0.00307EPSS
SaveExploits1
Cvelist
Cvelist
•added 2024/04/25 12:00 a.m.•126 views

CVE-2024-33663

python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats. This is similar to CVE-2022-29217...

7.6AI score0.00307EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2024/04/25 12:00 a.m.•36 views

Debian dla-3794 : pterm - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3794 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3794-1 [email protected]...

8.1CVSS7.2AI score0.93547EPSS
SaveExploits4References10
Tenable Nessus
Tenable Nessus
•added 2024/04/23 12:00 a.m.•58 views

Ubuntu 16.04 LTS / 18.04 LTS : LXD vulnerability (USN-6738-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6738-1 advisory. Fabian Bumer, Marcus Brinkmann, and Jrg Schwenk discovered that LXD incorrectly handled the handshake phase and the use of sequence numbers in SSH...

5.9CVSS7.1AI score0.93547EPSS
SaveExploits4References2
Rows per page
Query Builder