CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

48 matches found

Kitploit•added 2026/10/29 5:58 a.m.•22 views

CVE-2024-45337

Proof of Concept exploit for CVE-2024-45337 This repository contains a proof of concept exploit for CVE-2024-45337. It can be used to wrap ssh when interacting with an SSH server which is implemented using golang.org/x/crypto = v0.30.0. while caching permissions in the...

9.1CVSS8AI score0.03181EPSS

SaveExploits2

osv_cleanstart•added 2026/10/27 12:38 a.m.•10 views

CLEANSTART-2026-OJ95244 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

7.5CVSS5.9AI score0.00437EPSS

SaveExploits0References3

osv_cleanstart•added 2026/10/23 12:37 a.m.•14 views

CLEANSTART-2026-ZB98820 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

7.5CVSS5.9AI score0.00437EPSS

SaveExploits0References3

osv_cleanstart•added 2026/10/15 12:42 a.m.•18 views

CLEANSTART-2026-LD38118 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

7.5CVSS5.8AI score0.00437EPSS

SaveExploits0References3

osv_cleanstart•added 2026/10/06 12:36 a.m.•16 views

CLEANSTART-2026-EX19348 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

7.5CVSS5.8AI score0.00437EPSS

SaveExploits0References3

AstraLinux•added 2026/10/05 11:39 a.m.•17 views

Astra Linux – Vulnerability in golang-go.crypto

Applications and libraries that misuse the connection.serverAuthenticate function via the ServerConfig.PublicKeyCallback callback field may be susceptible to authorization bypasses. The documentation for ServerConfig.PublicKeyCallback states that “Calling this function does not guarantee that the...

9.1CVSS7.5AI score0.03181EPSS

SaveExploits2References2

osv_cleanstart•added 2026/10/02 12:35 a.m.•9 views

CLEANSTART-2026-MT59352 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

7.5CVSS5.8AI score0.00437EPSS

SaveExploits0References3

osv_cleanstart•added 2026/09/30 8:15 p.m.•13 views

CLEANSTART-2026-GH89937 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

9.8CVSS5.8AI score0.00437EPSS

SaveExploits0References3

osv_cleanstart•added 2026/09/25 12:36 a.m.•14 views

CLEANSTART-2026-IG26427 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

9.8CVSS5.8AI score0.00437EPSS

SaveExploits0References3

osv_cleanstart•added 2026/09/22 12:36 a.m.•29 views

CLEANSTART-2026-YI88599 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

9.8CVSS5.8AI score0.00437EPSS

SaveExploits0References3

osv_cleanstart•added 2026/09/18 1:18 a.m.•16 views

CLEANSTART-2026-YQ30478 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the dynatrace-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

9.8CVSS6.2AI score0.01834EPSS

SaveExploits1References47

osv_cleanstart•added 2026/09/10 1:56 a.m.•16 views

CLEANSTART-2026-KR69944 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the haproxy-ingress package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references...

9.8CVSS6.3AI score0.0691EPSS

SaveExploits2References72

osv_cleanstart•added 2026/09/10 12:42 a.m.•16 views

CLEANSTART-2026-KP10631 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the vault-k8s package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for...

9.8CVSS6.2AI score0.01834EPSS

SaveExploits1References23

osv_cleanstart•added 2026/09/08 1:58 a.m.•23 views

CLEANSTART-2026-UV76679 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

9.8CVSS6.3AI score0.01834EPSS

SaveExploits0References17

osv_cleanstart•added 2026/09/08 1:57 a.m.•24 views

CLEANSTART-2026-HB08666 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

9.8CVSS6.3AI score0.01834EPSS

SaveExploits0References18

osv_cleanstart•added 2026/09/08 1:35 a.m.•19 views

CLEANSTART-2026-BC74118 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the external-secrets-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See...

9.8CVSS6.3AI score0.01834EPSS

SaveExploits0References20

osv_cleanstart•added 2026/09/08 1:30 a.m.•16 views

CLEANSTART-2026-RU97646 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the helm-operator package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references fo...

9.8CVSS6.3AI score0.0691EPSS

SaveExploits6References156

osv_cleanstart•added 2026/09/08 12:42 a.m.•19 views

CLEANSTART-2026-LL86841 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the opentelemetry-collector package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See...

9.8CVSS6.8AI score0.00609EPSS

SaveExploits0References7

osv_cleanstart•added 2026/09/04 12:39 a.m.•18 views

CLEANSTART-2026-XF15574 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Security vulnerability affects the octo-sts package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595...

9.8CVSS5.8AI score0.00437EPSS

SaveExploits0References3

Cvelist•added 2026/05/22 2:31 a.m.•300 views

CVE-2026-39831 Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

The Verify method for FIDO/U2F security key types [email protected], [email protected] did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior,...

0.00478EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by