2 matches found
Code injection
WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...
5.8CVSS7AI score0.00793EPSS
SaveExploits0References3Affected Software1
Microsoft Windows Server 2003 win32k.sys DoS Vulnerability
This host is running Windows Server 2003 operating system and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmswin2k3dosvuln.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Windows Server 2003 win32k.sys DoS Vulnerability Authors: Nikita MR Copyright: Copyright c 20...
4.7CVSS6.6AI score0.013EPSS
SaveExploits1References1
20