Lucene search
+L

15518 matches found

NVD
NVD
added 2025/08/08 4:15 p.m.48 views

CVE-2025-8731

A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

10CVSS0.00635EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/08/08 3:32 p.m.50 views

CVE-2025-8731 TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials

A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

10CVSS0.00635EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/08/08 3:32 p.m.5 views

CVE-2025-8731 TRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials

A vulnerability was identified in TRENDnet TI-G160i, TI-PG102i and TPL-430AP up to 20250724. This affects an unknown part of the component SSH Service. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...

10CVSS9.6AI score0.00635EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/08/08 12:0 a.m.12 views

PT-2025-32392 · Unknown +1 · Ajaxplorer/Pydio Cells +1

Name of the Vulnerable Software and Affected Versions: AjaXplorer/Pydio Cells versions prior to 2.6 Description: An unauthenticated remote command execution vulnerability exists due to improper sanitization of user-supplied input to the destServer GET parameter within the checkInstall.php script ...

9.3CVSS8.3AI score0.01163EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2025/08/07 8:31 p.m.10 views

CVE-2013-10065

A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a...

8.7CVSS6.3AI score0.01141EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/08/07 12:31 a.m.13 views

CVE-2025-43980

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN. They enable the SSH service by default with the credentials of root/admin. The GUI doesn't offer a way to disable the account...

6.5CVSS6.4AI score0.00245EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/07 12:15 a.m.7 views

Security Bulletin: Vulnerabilities in SSH affects IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Potential vulnerability in SSH has been identified that affects IBM watsonx Orchestrate with watsonx Assistant Cartridge - UAB Component. The vulnerability has been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2025-22869 DESCRIPTION: SSH servers...

7.5CVSS6.1AI score0.00905EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/06 6:32 p.m.25 views

CVE-2025-38741

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication...

7.5CVSS6.5AI score0.00371EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/06 12:14 a.m.16 views

CVE-2025-44954

RUCKUS SmartZone SZ before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account...

9.8CVSS9AI score0.0072EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/05 8:15 p.m.12 views

CVE-2013-10065

A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a...

8.7CVSS0.01141EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2025/08/05 8:5 p.m.20 views

CVE-2013-10065 Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS

A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a...

8.7CVSS0.01141EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
added 2025/08/05 8:5 p.m.5 views

CVE-2013-10065 Sysax Multi-Server <= 6.10 SSHD Key Exchange DoS

A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a...

8.7CVSS6.3AI score0.01141EPSS
SaveExploits2References4
CVE
CVE
added 2025/08/05 8:5 p.m.28 views

CVE-2013-10065

CVE-2013-10065 affects Sysax Multi-Server 6.10 SSHD. A specially crafted SSH key exchange packet can crash the service, causing denial of service. The flaw is triggered by malformed key exchange data, including a non‑standard byte (0x28) replacing the SSH protocol delimiter. Multiple sources (NVD...

8.7CVSS6.5AI score0.01141EPSS
SaveExploits2References4Affected Software1
NVD
NVD
added 2025/08/05 5:15 p.m.9 views

CVE-2025-43980

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN. They enable the SSH service by default with the credentials of root/admin. The GUI doesn't offer a way to disable the account...

6.5CVSS0.00245EPSS
SaveExploits0References2
NVD
NVD
added 2025/08/05 1:15 a.m.19 views

CVE-2025-54804

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an...

6.5CVSS0.00386EPSS
SaveExploits1References2
CVE
CVE
added 2025/08/05 12:5 a.m.52 views

CVE-2025-54804

Russh is a Rust SSH client/server library. In versions ≤0.54.0, CHANNEL_WINDOW_ADJUST handling computes recipient_window_size from the decoded value without proper overflow checks, causing an integer overflow that can crash the server. The issue is fixed in version 0.54.1. Attacker impact is serv...

6.5CVSS7AI score0.00386EPSS
SaveExploits1References2Affected Software2
Debian CVE
Debian CVE
added 2025/08/05 12:5 a.m.8 views

CVE-2025-54804

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an...

6.5CVSS5.9AI score0.00386EPSS
SaveExploits1
OSV
OSV
added 2025/08/05 12:5 a.m.8 views

CVE-2025-54804 Russh is missing an overflow check during channel windows adjust

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an...

6.5CVSS7.3AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/08/05 12:5 a.m.5 views

CVE-2025-54804 Russh is missing an overflow check during channel windows adjust

Russh is a Rust SSH client & server library. In versions 0.54.0 and below, the channel window adjust message of the SSH protocol is used to track the free space in the receive buffer of the other side of a channel. The current implementation takes the value from the message and adds it to an...

6.5CVSS6.7AI score0.00386EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/08/05 12:0 a.m.17 views

PT-2025-31989 · Unknown · Sysax Multi Server

Name of the Vulnerable Software and Affected Versions: Sysax Multi-Server version 6.10 Description: A denial-of-service issue exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in a loss of...

8.7CVSS6.1AI score0.01141EPSS
SaveExploits2References6
Rows per page
Query Builder