Lucene search
+L

2527 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.24 views

The vulnerability of the Brocade Fabric OS operating system, related to deficiencies in authentication procedures, allows attackers to gain access to the system.

The vulnerability of the Brocade Fabric OS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to gain access to the system via telnet, SSH, or REST...

7.8CVSS7.2AI score0.0024EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2021/10/27 12:0 a.m.11 views

Cisco Firepower Threat Defense 缓冲区错误漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A buffer error vulnerability exists in Cisco Firepower Threat Defense Software that stems from a lack of proper error handling when an SSH session cannot be established. A...

8.6CVSS7.6AI score0.01346EPSS
SaveExploits0References5
OSV
OSV
added 2021/10/19 7:15 p.m.8 views

CVE-2021-31352

An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain sensitive information. A remote attacker with read and write access to network data could exploit thi...

5.3CVSS5.8AI score0.00808EPSS
SaveExploits1References1
Fedora
Fedora
added 2021/10/14 4:3 p.m.61 views

[SECURITY] Fedora 33 Update: openssh-8.4p1-8.fc33

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

7CVSS2AI score0.02545EPSS
SaveExploits2
CNNVD
CNNVD
added 2021/10/14 12:0 a.m.7 views

Juniper Networks SRX Series 加密问题漏洞

The Juniper Networks SRX Series is a set of SRX Series service gateway appliances from Juniper Networks, Inc. The Juniper Networks SRC Series suffers from a cryptographic issue vulnerability that stems from NETCONF over SSH allowing weak password negotiation. An attacker could exploit this...

5.3CVSS5.8AI score0.00808EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/10/13 4:0 p.m.4 views

CVE-2021-31352

An Information Exposure vulnerability in Juniper Networks SRC Series devices configured for NETCONF over SSH permits the negotiation of weak ciphers, which could allow a remote attacker to obtain sensitive information. A remote attacker with read and write access to network data could exploit thi...

5.3CVSS6.2AI score0.00808EPSS
SaveExploits1References2
Fedora
Fedora
added 2021/10/03 12:15 a.m.62 views

[SECURITY] Fedora 35 Update: openssh-8.7p1-2.fc35

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

7CVSS2AI score0.02545EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2021/10/03 12:0 a.m.25 views

Fedora: Security Advisory for openssh (FEDORA-2021-1f7339271d)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7CVSS6.6AI score0.02545EPSS
SaveExploits2References2
OSV
OSV
added 2021/09/23 3:15 a.m.7 views

CVE-2021-1419

A vulnerability in the SSH management feature of multiple Cisco Access Points APs platforms could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The vulnerability is due to improper checking on file operations within the SSH...

7.8CVSS5.8AI score0.00216EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/09/22 12:0 a.m.7 views

Cisco Access Points 安全漏洞

Cisco Access Points is a network access point device from Cisco. A security vulnerability exists in the Cisco Access Points platforms, which is caused by an incorrect file operation check in the SSH management interface. An attacker could use this vulnerability to allow a local authenticated user...

7.8CVSS7.4AI score0.00216EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2021/09/22 12:0 a.m.13 views

PT-2021-5054 · Cisco · Cisco Access Points +1

Name of the Vulnerable Software and Affected Versions: Cisco Access Points APs affected versions not specified Description: A vulnerability in the SSH management feature could allow a local, authenticated user to modify files on the affected device and possibly gain escalated privileges. The issu...

7.8CVSS7.5AI score0.00216EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2021/09/21 12:0 a.m.7 views

Dell EMC IsilonSD Management Server 加密问题漏洞

DELL Dell EMC IsilonSD Management Server is a management server for EMC IsilonSD storage from Dell USA. Dell EMC IsilonSD Management Server is vulnerable to a cryptographic issue that arises from the use of a corrupted or risky encryption algorithm in the SSH component. A remote attacker could...

9.8CVSS8.4AI score0.00834EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/09/20 12:0 a.m.10 views

SSH 操作系统命令注入漏洞

SSH is an application protocol of SSH. It provides encrypted transmission of network traffic. An operating system command injection vulnerability exists in ssh 2 prior to version 1.4.0 that could lead to remote code execution...

10CVSS8.9AI score0.03832EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2021/09/18 12:0 a.m.7 views

Teleport授权问题漏洞

Teleport is an identity-aware, multi-protocol access agent from Teleport USA, Inc. Used by engineers and security professionals to unify access to SSH servers, Kubernetes clusters, web applications, and databases across all environments, Teleport suffers from an authorization issue vulnerability...

9.8CVSS8.3AI score0.01067EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.11 views

The vulnerability of the SSH protocol implementation in the cryptographic security tool PuTTY allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SSH protocol implementation in the cryptography security tool PuTTY is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

8.1CVSS7.5AI score0.01106EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/09/15 8:15 p.m.7 views

UBUNTU-CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE...

5.3CVSS7.2AI score0.05326EPSS
SaveExploits1References6
ATTACKERKB
ATTACKERKB
added 2021/09/09 7:15 p.m.4 views

CVE-2021-28914

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow the user to set a weak password because the strength is shown in configuration tool, but finally not enforced. This is usable and part of an attack chain to gain SSH root access...

6.5CVSS5.3AI score0.01018EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/09/09 6:15 p.m.4 views

CVE-2021-28913

BAB TECHNOLOGIE GmbH eibPort V3 prior version 3.9.1 allow unauthenticated attackers access to /webif/SecurityModule to validate the so called and hard coded unique 'eibPort String' which acts as the root SSH key passphrase. This is usable and part of an attack chain to gain SSH root access...

10CVSS5.3AI score0.01844EPSS
SaveExploits0References2
OSV
OSV
added 2021/09/09 5:15 a.m.8 views

CVE-2021-34718

A vulnerability in the SSH Server process of Cisco IOS XR Software could allow an authenticated, remote attacker to overwrite and read arbitrary files on the local device. This vulnerability is due to insufficient input validation of arguments that are supplied by the user for a specific file...

8.1CVSS5.9AI score0.01581EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2021/09/08 12:0 a.m.5 views

PT-2021-4048 · Cisco · Cisco Ios Xr

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the SSH Server process could allow an authenticated, remote attacker to overwrite and read arbitrary files on the local device. This issue is due to...

8.5CVSS7.9AI score0.01581EPSS
SaveExploits0References7
Rows per page
Query Builder