Lucene search
+L

16030 matches found

Tenable Nessus
Tenable Nessus
added 2023/07/31 12:00 a.m.37 views

EulerOS Virtualization 3.0.6.0 : curl (EulerOS-SA-2023-2500)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass...

9.8CVSS7.2AI score0.02195EPSS
SaveExploits5References6
OpenVAS
OpenVAS
added 2023/07/31 12:00 a.m.36 views

Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-2484)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.8AI score0.02195EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2023/07/31 12:00 a.m.38 views

EulerOS Virtualization 2.9.1 : curl (EulerOS-SA-2023-2510)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A path traversal vulnerability exists in curl 8.0.0 SFTP implementation causes the tilde character to be wrongly replaced when used...

8.8CVSS7AI score0.02195EPSS
SaveExploits4References5
Tenable Nessus
Tenable Nessus
added 2023/07/31 12:00 a.m.122 views

RHEL 9 : openssh (RHSA-2023:4329)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4329 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary f...

9.8CVSS7.8AI score0.797EPSS
SaveExploits10References4
Tenable Nessus
Tenable Nessus
added 2023/07/31 12:00 a.m.35 views

EulerOS Virtualization 2.9.0 : curl (EulerOS-SA-2023-2523)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A path traversal vulnerability exists in curl 8.0.0 SFTP implementation causes the tilde character to be wrongly replaced when used...

8.8CVSS7AI score0.02195EPSS
SaveExploits4References5
OpenVAS
OpenVAS
added 2023/07/30 12:00 a.m.44 views

Fedora: Security Advisory for openssh (FEDORA-2023-79a18e1725)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.797EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
added 2023/07/28 12:00 a.m.26 views

EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2023-2484)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass...

9.8CVSS7.2AI score0.02195EPSS
SaveExploits5References6
OpenVAS
OpenVAS
added 2023/07/28 12:00 a.m.22 views

Fedora: Security Advisory for kitty (FEDORA-2023-3746647cc3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.04944EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/07/28 12:00 a.m.43 views

EulerOS Virtualization 2.10.1 : curl (EulerOS-SA-2023-2459)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass...

9.8CVSS7.2AI score0.02195EPSS
SaveExploits5References6
VulnCheck KEV
VulnCheck KEV
added 2023/07/26 12:00 a.m.9 views

VulnCheck KEV: CVE-2023-38408

The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists...

9.8CVSS7.5AI score0.797EPSS
SaveExploits10References1
Amazon
Amazon
added 2023/07/26 12:00 a.m.10 views

Medium: curl

Issue Overview: libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the now freed hash. This flaw risks inserting sensitive heap-based data into t...

7.5CVSS6.9AI score0.02489EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2023/07/26 12:00 a.m.32 views

Fedora: Security Advisory for openssh (FEDORA-2023-878e04f4ae)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.797EPSS
SaveExploits10References2
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:00 a.m.21 views

Cisco NX-OS Software SSH Key Information Disclosure (CVE-2019-1731)

A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The...

5.1CVSS5.4AI score0.00357EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:00 a.m.48 views

SUSE SLES12 Security Update : openssh (SUSE-SU-2023:2940-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:2940-1 advisory. - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent1's PKCS11 support could be abused to achieve remote code execution via...

9.8CVSS7.2AI score0.797EPSS
SaveExploits10References4
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:00 a.m.8 views

PAM SSH Host Auto Collection

Binary data pamsshautocollect.nbin...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:00 a.m.21 views

Cisco Multiple Vulnerabilities in NX-OS-Based Products (CVE-2014-2200)

Cisco NX-OS 5.0 before 5.05 on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti11629. This plugin only works with Tenable.ot...

7.1CVSS5.4AI score0.01858EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:00 a.m.57 views

SUSE SLES15 Security Update : openssh (SUSE-SU-2023:2946-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2946-1 advisory. This update for openssh fixes the following issue: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent1's PKCS1...

9.8CVSS7.2AI score0.797EPSS
SaveExploits10References4
OpenVAS
OpenVAS
added 2023/07/25 12:00 a.m.52 views

SUSE: Security Advisory (SUSE-SU-2023:2950-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.797EPSS
SaveExploits10References4
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:00 a.m.27 views

Cisco FXOS and NX-OS Software Unauthorized Administrator Account (CVE-2018-0294)

A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not properly delete...

7.2CVSS6.6AI score0.00431EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/07/25 12:00 a.m.74 views

SUSE SLES15 Security Update : openssh (SUSE-SU-2023:2947-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2947-1 advisory. - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent1's PKCS11 support could be abused to achieve remote code...

9.8CVSS7.2AI score0.797EPSS
SaveExploits10References4
Rows per page
Query Builder