20 matches found
Arbitrary Argument Injection
Overview Affected versions of this package are vulnerable to Arbitrary Argument Injection via the UserAuthPublicKey authentication path in sshd-core/src/main/java/org/apache/sshd/server/auth/pubkey/UserAuthPublicKey.java. An attacker can authenticate with a malicious OpenSSH user certificate by...
EUVD-2023-0059
Malicious code in bioql PyPI...
CVE-2024-13643
The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modification. This vulnerability can lead to privilege escalation and denial of service conditions due to missing capability checks on the backupoptions and resetoptions functions i...
CVE-2024-13643
CVE-2024-13643 relates to the Zox News – Pro WordPress Theme plugin (WordPress) with versions up to 3.17.0. The root cause, per Wordfence and related sources, is missing authorization checks in backup_options() and reset_options(), allowing authenticated users with Subscriber-level access and abo...
CVE-2023-38325
...
CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
SUSE CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
cryptography mishandles SSH certificates
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
GHSA-CF7P-GM2M-833M cryptography mishandles SSH certificates
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
ALPINE-CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
PYSEC-2023-112
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
PYSEC-2023-112
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
python-cryptography Trust Management Vulnerabilities
python-cryptography is a Python code library for cryptographic applications from the Cryptographic team. A security vulnerability exists in python-cryptography versions prior to 41.0.2, which stems from incorrectly handling SSH certificates with critical options...
CVE-2023-38325
The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options...
