Lucene search
+L

1760 matches found

SUSE CVE
SUSE CVE
added 2025/11/09 2:28 a.m.6 views

SUSE CVE-2016-11072

An issue was discovered in Mattermost Server before 3.0.2. The purposes of a session ID and a Session Token were mishandled...

6.5CVSS7AI score0.00722EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:00 a.m.3 views

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 : libssh vulnerability (USN-7849-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7849-1 advisory. Philippe Antoine discovered that libssh did not properly manage memory when calculating a session ...

4.7CVSS5.6AI score0.00222EPSS
SaveExploits0References2
Ubuntu
Ubuntu
added 2025/11/04 9:36 a.m.10 views

USN-7849-1: libssh vulnerability

Philippe Antoine discovered that libssh did not properly manage memory when calculating a session id during the key exchange process. An attacker could possibly use this issue to cause libssh to crash, resulting in a denial of service...

4.7CVSS5.7AI score0.00222EPSS
SaveExploits0
OSV
OSV
added 2025/11/04 9:36 a.m.11 views

USN-7849-1 libssh vulnerability

Philippe Antoine discovered that libssh did not properly manage memory when calculating a session id during the key exchange process. An attacker could possibly use this issue to cause libssh to crash, resulting in a denial of service...

4.7CVSS5.8AI score0.00222EPSS
SaveExploits0References2
Redos
Redos
added 2025/10/30 12:00 a.m.6 views

ROS-20251030-04

A vulnerability in the MongoDB database management system is related to misconfiguration of the lsid field. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6.5CVSS6.7AI score0.00272EPSS
SaveExploits0
SUSE Linux
SUSE Linux
added 2025/10/24 1:28 p.m.6 views

Security update for libssh

This update for libssh fixes the following issues: CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375. CVE-2025-8114: NULL pointer dereference when an allocation error happens during the...

5.7CVSS6.9AI score0.00402EPSS
SaveExploits0References8
OSV
OSV
added 2025/10/24 1:28 p.m.3 views

SUSE-SU-2025:3787-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375. - CVE-2025-8114: NULL pointer dereference when an allocation error happens during the...

4.7CVSS6.9AI score0.00402EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2025/10/20 4:31 p.m.5 views

Security update for libssh

This update for libssh fixes the following issues: CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375 Patch Instructions: To install this SUSE upda...

5.7CVSS7.1AI score0.00402EPSS
SaveExploits0References8
OSV
OSV
added 2025/10/20 4:31 p.m.6 views

SUSE-SU-2025:20894-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 - CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375...

4.7CVSS5.8AI score0.00402EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2025/10/20 4:13 p.m.7 views

CVE-2025-6515 Reuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackers

The MCP SSE endpoint in oatpp-mcp returns an instance pointer as the session ID, which is not unique nor cryptographically secure. This allows network attackers with access to the oatpp-mcp server to guess future session IDs and hijack legitimate client MCP sessions, returning malicious responses...

6.8CVSS6.5AI score0.00374EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/20 12:00 a.m.9 views

PT-2025-42788

Name of the Vulnerable Software and Affected Versions oatpp-mcp affected versions not specified Description The MCP SSE endpoint returns an instance pointer as the session ID, which is not unique or cryptographically secure. This allows network attackers with access to the oatpp-mcp server to gue...

6.8CVSS6.5AI score0.00374EPSS
SaveExploits0References13
OSV
OSV
added 2025/10/14 3:20 p.m.16 views

SUSE-SU-2025:20847-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2025-8114: Fixed NULL pointer dereference when calculating the session ID during the key exchange KEX process bsc1246974 - CVE-2025-8277: Fixed Memory Exhaustion via Repeated Key Exchange bsc1249375...

4.7CVSS6.1AI score0.00402EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2019-16770

Malware in sbrugna...

8.8CVSS8.5AI score0.0526EPSS
SaveExploits2References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2007-6512

Malware in sbrugna...

6.4CVSS6.4AI score0.02702EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2012-6418

Malware in sbrugna...

7.5CVSS6.4AI score0.00944EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2012-3002

Malware in sbrugna...

5CVSS6.1AI score0.02198EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.17 views

EUVD-2014-8365

Malware in sbrugna...

2.1CVSS6.4AI score0.0032EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2003-0487

Malware in sbrugna...

10CVSS6.4AI score0.01779EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-16143

Malware in sbrugna...

8.8CVSS8.6AI score0.0127EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2014-9208

Malware in sbrugna...

6.8CVSS6.4AI score0.02048EPSS
SaveExploits0References3
Rows per page
Query Builder