Lucene search
+L

32300 matches found

Ubuntu
Ubuntu
added 2026/07/09 8:41 a.m.13 views

USN-8519-1: Go Cryptography vulnerabilities

Jakub Ciolek and Nicola Murino discovered that Go Cryptography incorrectly handled SSH agent responses. An attacker could use this to cause a denial of service. CVE-2025-47913 Yuichi Watanabe discovered that Go Cryptography incorrectly handled SSH key exchanges. An attacker could use this to caus...

7.5CVSS6.8AI score0.00905EPSS
SaveExploits1
OSV
OSV
added 2026/07/09 8:41 a.m.5 views

USN-8519-1 golang-go.crypto vulnerabilities

Jakub Ciolek and Nicola Murino discovered that Go Cryptography incorrectly handled SSH agent responses. An attacker could use this to cause a denial of service. CVE-2025-47913 Yuichi Watanabe discovered that Go Cryptography incorrectly handled SSH key exchanges. An attacker could use this to caus...

7.5CVSS6.7AI score0.00905EPSS
SaveExploits1References3
NVD
NVD
added 2026/07/09 8:16 a.m.10 views

CVE-2026-31983

A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpoint and obtain the list of users that have uploaded their public SSH keys, their groups, and the uploaded public SSH...

6.9CVSS0.00235EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/07/09 8:1 a.m.9 views

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.

...

5.4CVSS6.1AI score0.0025EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/09 7:22 a.m.15 views

EUVD-2026-42533

A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpoint and obtain the list of users that have uploaded their public SSH keys, their groups, and the uploaded public SSH...

6.9CVSS6AI score0.00235EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/07/09 6:29 a.m.11 views

CVE-2026-15171

A flaw was found in Wireshark's SSH Secure Shell protocol dissector. A remote attacker could craft a malicious network capture file that, when opened by a user, would cause the Wireshark application to crash. This vulnerability leads to a denial of service, preventing the user from analyzing...

5.5CVSS5.9AI score0.00122EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/07/09 6:26 a.m.8 views

CVE-2026-47831

Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemcell-builder allows a remote attacker to brute-force the resulting SSH login via TCP/22. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98...

7.7CVSS7.1AI score0.00191EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/09 6:16 a.m.15 views

CVE-2026-41857

A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh or bosh scp/bosh logs -f with default flags. Affected versions: BOSH CLI versions prior to 7.10.5...

7.8CVSS0.00148EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/09 6:0 a.m.6 views

RLSA-2026:36734 Low: libxml2 security update

The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 For more details about the security issues, including the impact, a CVSS score,...

2.5CVSS6.4AI score0.00207EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/07/09 5:35 a.m.7 views

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses

A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak p...

9.1CVSS6.1AI score0.00621EPSS
SaveExploits0References9
CVE
CVE
added 2026/07/09 4:31 a.m.18 views

CVE-2026-41857

CVE-2026-41857 affects BOSH CLI prior to 7.10.5. A compromised (malicious) BOSH Director can cause arbitrary shell commands to run on the operator’s workstation when using bosh ssh, bosh scp, or bosh logs -f with default flags. Impact is high (confidentiality, integrity, availability). Mitigation...

7.8CVSS7.3AI score0.00148EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/09 4:31 a.m.37 views

CVE-2026-41857 BOSH CLI Shell Injection

A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh or bosh scp/bosh logs -f with default flags. Affected versions: BOSH CLI versions prior to 7.10.5...

7.8CVSS0.00148EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/09 4:31 a.m.5 views

CVE-2026-41857 BOSH CLI Shell Injection

A compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the operator runs bosh ssh or bosh scp/bosh logs -f with default flags. Affected versions: BOSH CLI versions prior to 7.10.5...

7.1CVSS7.1AI score
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/09 2:52 a.m.6 views

SUSE CVE-2026-59999

In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...

5.9CVSS6.1AI score0.00159EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/07/09 12:0 a.m.13 views

PT-2026-57042

Summary A crafted backup archive can trigger OS command injection during database restore. The restore workflow extracts a ZIP archive, enumerates files under db-dumps, converts the dump path to an absolute path, and passes that path into database import commands that are built as shell command...

8CVSS6.2AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/09 12:0 a.m.22 views

Malicious code in @wagni_bot/bsc-sdk (npm)

The npm package @wagnibot/bsc-sdk is a supply-chain credential stealer disguised as a BNB Smart Chain BSC SDK. It is one member of a coordinated campaign of 25 crypto/web3 typosquat packages published under the single npm scope @wagnibot on 2026-07-09. Each package declares a postinstall lifecycl...

5.8AI score
SaveExploits0References9
OSV
OSV
added 2026/07/09 12:0 a.m.4 views

ALSA-2026:37410 Important: buildah security update

The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...

9.1CVSS6.2AI score0.006EPSS
SaveExploits0References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/09 12:0 a.m.38 views

Malicious code in antsrcsrctest (npm)

The npm package antsrcsrctest masquerades as a "simple date formatting utility" index.js exports a harmless formatDate function that is never referenced by the malicious code but is a credential-harvesting and cloud-metadata-stealing reconnaissance tool. It declares a preinstall: node preinstall....

6.1AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/09 12:0 a.m.10 views

RockyLinux 8 : libxml2 (RLSA-2026:36734)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36734 advisory. libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 Tenable has extracted the preceding description block directly from th...

2.5CVSS6.4AI score0.00207EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/08 9:16 p.m.11 views

CVE-2026-54590

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Version 2.23.0 contains an incomplete fix for CVE-2026-45309 in SSHServerConfig.settokens that blocks /, , and .. before %u substitution in...

5.9CVSS0.00286EPSS
SaveExploits0References3
Rows per page
Query Builder