Lucene search
+L

6535 matches found

RedHat Linux
RedHat Linux
added 2026/05/04 9:42 a.m.17 views

OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode

A flaw was found in OpenSSH. When the scp command is used by a root user to download a file with the legacy protocol option -O and without preserving original file permissions -p, the downloaded file can be installed with elevated privileges setuid or setgid. This unexpected behavior could allow ...

8.1CVSS5.8AI score0.00612EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/05/04 9:42 a.m.119 views

Important: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

8.1CVSS6AI score0.00612EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/04 6:36 a.m.8 views

ROOT-OS-DEBIAN-12-CVE-2026-35414 CVE-2026-35414 in rootio-openssh - Patched by Root

Root has patched CVE-2026-35414 in the rootio-openssh package for Root:Debian:12. Multiple fixed versions available...

8.1CVSS5.7AI score0.00176EPSS
SaveExploits0
OSV
OSV
added 2026/05/04 6:36 a.m.3 views

ROOT-OS-DEBIAN-12-CVE-2026-35385 CVE-2026-35385 in rootio-openssh - Patched by Root

Root has patched CVE-2026-35385 in the rootio-openssh package for Root:Debian:12. Multiple fixed versions available...

8.1CVSS5.9AI score0.00612EPSS
SaveExploits0
OSV
OSV
added 2026/05/04 6:36 a.m.7 views

ROOT-OS-DEBIAN-12-CVE-2026-35386 CVE-2026-35386 in rootio-openssh - Patched by Root

Root has patched CVE-2026-35386 in the rootio-openssh package for Root:Debian:12. Multiple fixed versions available...

8.1CVSS5.8AI score0.00319EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.14 views

AlmaLinux 8 : openssh (ALSA-2026:13383)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:13383 advisory. OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode CVE-2026-35385 OpenSSH: OpenSSH: Security bypass via...

8.1CVSS6.2AI score0.00612EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.4 views

RHEL 10 : openssh (RHSA-2026:13380)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13380 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...

8.1CVSS6.2AI score0.00612EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.67 views

RHEL 8 : openssh (RHSA-2026:13383)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13383 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...

8.1CVSS6.2AI score0.00612EPSS
SaveExploits0References12
AlmaLinux
AlmaLinux
added 2026/05/04 12:0 a.m.13 views

Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode...

8.1CVSS6.2AI score0.00612EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.20 views

AlmaLinux 10 : openssh (ALSA-2026:13380)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:13380 advisory. OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode CVE-2026-35385 OpenSSH: OpenSSH: Security bypass via...

8.1CVSS6.2AI score0.00612EPSS
SaveExploits0References7
OSV
OSV
added 2026/05/04 12:0 a.m.9 views

ALSA-2026:13381 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode...

8.1CVSS6.2AI score0.00612EPSS
SaveExploits0References12
OSV
OSV
added 2026/05/04 12:0 a.m.12 views

ALSA-2026:13380 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode...

8.1CVSS5.9AI score0.00612EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:0 a.m.25 views

RHEL 9 : openssh (RHSA-2026:13381)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:13381 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...

8.1CVSS6.2AI score0.00612EPSS
SaveExploits0References12
OSV
OSV
added 2026/05/03 9:43 a.m.8 views

CLSA-2026-1777466052 openssh: Fix of CVE-2026-35414

CVE-2026-35414: fix incorrect matching of the authorizedkeys principals="" option against certificate principals containing comma characters...

8.1CVSS6AI score0.00176EPSS
SaveExploits0References1
Fedora
Fedora
added 2026/05/02 1:57 a.m.11 views

[SECURITY] Fedora 42 Update: openssh-9.9p1-14.fc42

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

8.1CVSS5.9AI score0.00612EPSS
SaveExploits0
OSV
OSV
added 2026/05/02 1:14 a.m.10 views

CLSA-2026-1777466402 openssh: Fix of CVE-2026-35414

CVE-2026-35414: fix incorrect matching of the authorizedkeys principals="" option against certificate principals containing comma characters...

8.1CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/02 12:0 a.m.7 views

Fedora 42 : openssh (2026-d08c298940)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d08c298940 advisory. Fixes high severity CVE: - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Tenable has extracted the...

8.1CVSS5.8AI score0.00612EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/01 10:22 a.m.9 views

RHSA-2026:12389 Red Hat Security Advisory: openssh security update

Bulletin has no description...

7.5CVSS5.7AI score0.00612EPSS
SaveExploits0References26
OSV
OSV
added 2026/04/30 9:54 p.m.10 views

CLSA-2026-1777586051 openssh: Fix of CVE-2026-35386

CVE-2026-35386: fix client-side command execution via control characters in usernames by adding iscntrl rejection to validruser...

8.1CVSS5.9AI score0.00319EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/30 9:49 p.m.9 views

CLSA-2026-1777585781 openssh: Fix of CVE-2026-35386

CVE-2026-35386: fix client-side command execution via control characters in usernames by adding iscntrl rejection to validruser...

8.1CVSS5.9AI score0.00319EPSS
SaveExploits0References1
Rows per page
Query Builder