CVE-2024-26303

Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon...

CVE-2024-26303

CVE-2024-26303 describes an authenticated denial-of-service against the ArubaOS-Switch SSH Daemon. The vulnerability is triggered by an attacker with high privileges over the network, with no user interaction, causing an impact to availability (CVSSv3.1 base score 4.9, MEDIUM). Affected component...

CVE-2024-26303

Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon...

CVE-2024-26303

Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon...

CVE-2024-29735 Apache Airflow: Potentially harmful permission changing by log task handler

Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 through 2.8.3. Airflow's local file task handler in Airflow incorrectly set permissions for all parent folders of log folder, in default configuration adding write access to Unix...

CVE-2024-29735 Apache Airflow: Potentially harmful permission changing by log task handler

Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 through 2.8.3. Airflow's local file task handler in Airflow incorrectly set permissions for all parent folders of log folder, in default configuration adding write access to Unix...

CVE-2024-29735 Apache Airflow: Potentially harmful permission changing by log task handler

Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 through 2.8.3. Airflow's local file task handler in Airflow incorrectly set permissions for all parent folders of log folder, in default configuration adding write access to Unix...

CVE-2024-29735

Apache Airflow versions 2.8.2 through 2.8.3 are vulnerable to an Improper Preservation of Permissions issue in the local file task handler . The component incorrectly sets permissions for all parent folders of the log directory, potentially granting write access to the Unix group . If Airflow is ...

CVE-2024-26303: Undefined Security Weakness

Authenticated Denial of Service Vulnerability in ArubaOS-Switch SSH Daemon...

PT-2024-2587

Name of the Vulnerable Software and Affected Versions ArubaOS-Switch versions affected versions not specified Description The issue is related to incorrect resource cleanup or deallocation in the SSH Daemon of the ArubaOS-Switch operating system, affecting various Aruba router models. This can be...

CVE-2024-21865

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell...

CVE-2024-21865

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell...

CVE-2024-21865

The HGW BL1500HM home router provided by KDDI CORPORATION is vulnerable to a use of weak credentials (CWE-1391) issue in version 002.001.013 and earlier. A network-adjacent, unauthenticated attacker can exploit this flaw to connect to the device via SSH and obtain a shell . To mitigate this risk,...

CVE-2024-21865: Use of Weak Credentials

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell...

Slackware: Security Advisory (SSA:2024-083-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2024-19102

Name of the Vulnerable Software and Affected Versions HGW BL1500HM versions 002.001.013 and earlier Description The issue is related to the use of weak credentials. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell. Recommendations For HGW BL1500HM...

openSUSE 15 Security Update : jbcrypt, trilead-ssh2 (SUSE-SU-2024:0972-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:0972-1 advisory. - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack bsc1218198. Tenable has extracted the preceding description bloc...

openSUSE 15: jsch-agent-proxy-connector-factory / jsch-agent-proxy-core / etc (SUSE-SU-2024:0974-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:0974-1 advisory. - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack bsc1218198. Tenable has extracted the preceding description bloc...

SUSE-SU-2024:0974-1 Security update for jsch-agent-proxy

This update for jsch-agent-proxy fixes the following issues: - CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack bsc1218198...

Cisco IOS XR Software SSH Privilege Escalation (cisco-sa-iosxr-ssh-privesc-eWDMKew3)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability. - A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Convergence System NCS 540 Series and 5700 Series Routers could allow an authenticated, local...