Lucene search
K

14869 matches found

GitLab Advisory Database
GitLab Advisory Database
added 2022/09/07 12:0 a.m.64 views

x/crypto/ssh vulnerable to panic via SSH server

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS3.9AI score0.00948EPSS
Exploits0References7Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2022/09/07 12:0 a.m.47 views

x/crypto/ssh vulnerable to panic via SSH server

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS3.9AI score0.00948EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2022/09/06 6:15 p.m.23 views

CVE-2021-43565

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS0.00948EPSS
Exploits0References2
OSV
OSV
added 2022/09/06 6:15 p.m.6 views

AZL-43347 CVE-2021-43565 affecting package cf-cli for versions less than 8.4.0-18

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS6.8AI score0.00948EPSS
Exploits0References1
OSV
OSV
added 2022/09/06 6:15 p.m.11 views

CVE-2021-43565

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/09/06 6:15 p.m.4 views

AZL-43348 CVE-2021-43565 affecting package libcontainers-common for versions less than 20210626-5

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS6.8AI score0.00948EPSS
Exploits0References1
OSV
OSV
added 2022/09/06 6:15 p.m.3 views

AZL-43338 CVE-2021-43565 affecting package gh for versions less than 2.13.0-19

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS6.6AI score0.00948EPSS
Exploits0References1
OSV
OSV
added 2022/09/06 6:15 p.m.5 views

AZL-43344 CVE-2021-43565 affecting package moby-buildx for versions less than 0.7.1-20

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS6.6AI score0.00948EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2022/09/06 6:15 p.m.43 views

CVE-2021-43565

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS6.8AI score0.00948EPSS
Exploits0References1
Prion
Prion
added 2022/09/06 6:15 p.m.33 views

Code injection

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

5CVSS7.8AI score0.00948EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/09/06 6:15 p.m.6 views

UBUNTU-CVE-2021-43565

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS6.8AI score0.00948EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2022/09/06 5:3 p.m.46 views

CVE-2021-43565

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.5CVSS7AI score0.00948EPSS
Exploits0
Cvelist
Cvelist
added 2022/09/06 5:3 p.m.33 views

CVE-2021-43565

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server...

7.7AI score0.00948EPSS
Exploits0References2
CVE
CVE
added 2022/09/06 5:3 p.m.635 views

CVE-2021-43565

The CVE-2021-43565 vulnerability affects golang.org/x/crypto’s x/crypto/ssh: the package before 0.0.0-20211202192323-5770296d904e can cause an SSH server to panic. The issue is tied to the x/crypto/ssh component and is triggered by the cited pre-release version of the package. A patched version e...

7.5CVSS7.4AI score0.00948EPSS
Exploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/09/06 12:0 a.m.33 views

Amazon Linux 2022 : python3-twisted, python3-twisted+tls (ALAS2022-2022-046)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-046 advisory. An uncontrolled resource consumption flaw was found in python-twisted in the dataReceived function. This flaw allows an unauthenticated, remote attacker to send a simple command to use all available...

7.5CVSS7.4AI score0.03608EPSS
Exploits1References3
Packet Storm
Packet Storm
added 2022/09/05 12:0 a.m.410 views

Cisco ASA-X With FirePOWER Services Authenticated Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco ASA-X with FirePOWER Services Authenticated Command Injection', 'Description' = %q This module exploits an authenticated command injection...

9CVSS0.9AI score0.39862EPSS
Exploits4
ATTACKERKB
ATTACKERKB
added 2022/08/31 4:15 p.m.1 views

CVE-2022-30318

Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, manipulate configuration, denial of...

9.8CVSS7.5AI score0.01345EPSS
Exploits0References3
NVD
NVD
added 2022/08/31 4:15 p.m.13 views

CVE-2022-30318

Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, manipulate configuration, denial of...

9.8CVSS0.01345EPSS
Exploits0References2
Prion
Prion
added 2022/08/31 4:15 p.m.17 views

Hardcoded credentials

Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, manipulate configuration, denial of...

7.5CVSS9.6AI score0.01345EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2022/08/31 3:39 p.m.24 views

CVE-2022-30318

Honeywell ControlEdge through R151.1 uses Hard-coded Credentials. According to FSCT-2022-0056, there is a Honeywell ControlEdge hardcoded credentials issue. The affected components are characterized as: SSH. The potential impact is: Remote code execution, manipulate configuration, denial of...

9.8AI score0.01345EPSS
Exploits0References2
Rows per page
Query Builder