Lucene search
+L

1696 matches found

Tenable Nessus
Tenable Nessus
added 2025/11/12 12:0 a.m.6 views

EulerOS 2.0 SP10 : libssh (EulerOS-SA-2025-2420)

According to the versions of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to sshgetfingerprinthash...

8.8CVSS6.4AI score0.00417EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/11/09 2:28 a.m.4 views

SUSE CVE-2016-11072

An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled...

6.5CVSS7AI score0.00722EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.3 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : libssh vulnerability (USN-7849-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7849-1 advisory. Philippe Antoine discovered that libssh did not properly manage memory when calculating a session ...

4.7CVSS5.6AI score0.00217EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2025/11/04 9:36 a.m.8 views

USN-7849-1: libssh vulnerability

Philippe Antoine discovered that libssh did not properly manage memory when calculating a session id during the key exchange process. An attacker could possibly use this issue to cause libssh to crash, resulting in a denial of service...

4.7CVSS5.7AI score0.00217EPSS
SaveExploits0
OSV
OSV
added 2025/11/04 9:36 a.m.6 views

USN-7849-1 libssh vulnerability

Philippe Antoine discovered that libssh did not properly manage memory when calculating a session id during the key exchange process. An attacker could possibly use this issue to cause libssh to crash, resulting in a denial of service...

4.7CVSS5.8AI score0.00217EPSS
SaveExploits0References2
Redos
Redos
added 2025/10/30 12:0 a.m.3 views

ROS-20251030-04

A vulnerability in the MongoDB database management system is related to misconfiguration of the lsid field. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6.5CVSS6.7AI score0.00254EPSS
SaveExploits0
SUSE Linux
SUSE Linux
added 2025/10/24 1:28 p.m.5 views

Security update for libssh

This update for libssh fixes the following issues: CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375. CVE-2025-8114: NULL pointer dereference when an allocation error happens during the...

5.7CVSS6.9AI score0.00375EPSS
SaveExploits0References8
OSV
OSV
added 2025/10/24 1:28 p.m.3 views

SUSE-SU-2025:3787-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375. - CVE-2025-8114: NULL pointer dereference when an allocation error happens during the...

4.7CVSS6.9AI score0.00375EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2025/10/20 4:31 p.m.2 views

Security update for libssh

This update for libssh fixes the following issues: CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375 Patch Instructions: To install this SUSE upda...

5.7CVSS7.1AI score0.00375EPSS
SaveExploits0References8
OSV
OSV
added 2025/10/20 4:31 p.m.5 views

SUSE-SU-2025:20894-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 - CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375...

4.7CVSS5.8AI score0.00375EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/20 4:13 p.m.6 views

CVE-2025-6515 Reuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackers

The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP sessions, returning malicious responses...

6.8CVSS6.5AI score0.00374EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/20 12:0 a.m.5 views

PT-2025-42788

Name of the Vulnerable Software and Affected Versions oatpp-mcp affected versions not specified Description The MCP SSE endpoint returns an instance pointer as the session ID, which is not unique or cryptographically secure. This allows network attackers with access to the oatpp-mcp server to gue...

6.8CVSS6.5AI score0.00374EPSS
SaveExploits0References13
OSV
OSV
added 2025/10/14 3:20 p.m.13 views

SUSE-SU-2025:20847-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 - CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375...

4.7CVSS6.1AI score0.00375EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2021-10076

Malware in sbrugna...

7.1CVSS6.9AI score0.02714EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2021-21742

Malware in sbrugna...

6.7CVSS6.6AI score0.0015EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2021-22788

Malware in sbrugna...

5.3CVSS5.3AI score0.00572EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-27328

Malware in sbrugna...

5.5CVSS6AI score0.00726EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-27062

Malware in sbrugna...

5.5CVSS5.6AI score0.00333EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-18865

Malware in sbrugna...

7.5CVSS7.7AI score0.01081EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-3630

Malware in sbrugna...

6.8CVSS6AI score0.02838EPSS
SaveExploits0References13
Rows per page
Query Builder