15993 matches found
RLSA-2022:5313 Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: OAUTH2 bearer bypass in connection re-use CVE-2022-22576 curl: credential leak on redirect CVE-2022-27774 curl:...
CVE-2022-28622
A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...
Code injection
A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...
CVE-2022-28622
A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2...
CVE-2022-28622
CVE-2022-28622 affects HPE StoreOnce Software. The SSH server supports weak key exchange algorithms, enabling potential remote unauthorized access. A fix is available in HPE StoreOnce Software 4.3.2. Affected product: HPE StoreOnce Software. Remediation: upgrade to version 4.3.2 (or apply the ven...
Secheron SEPCOS Control and Protection Relay Weak Password Vulnerability
Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.The Secheron SEPCOS Control and Protection Relay has a weak password...
CVE-2022-1668
Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH...
Design/Logic Flaw
Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH...
CVE-2022-1668
CVE-2022-1668 affects Secheron SEPCOS Control and Protection Relay. Weak default root credentials allow remote attackers to obtain OS superuser privileges over an open SSH port. Public advisories (ICS-CISA) describe multiple related vulnerabilities and confirm a high-severity risk with remote exp...
CVE-2022-1668 Secheron SEPCOS Control and Protection Relay
Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH...
CVE-2022-1668 Secheron SEPCOS Control and Protection Relay
Weak default root user credentials allow remote attackers to easily obtain OS superuser privileges over the open TCP port for SSH...
CVE-2022-31749: WatchGuard Authenticated Arbitrary File Read/Write (Fixed)
A remote and low-privileged WatchGuard Firebox or XTM user can read arbitrary system files when using the SSH interface due to an argument injection vulnerability affecting the diagnose command. Additionally, a remote and highly privileged user can write arbitrary system files when using the SSH...
CVE-2017-20083
A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the component SSH Server. The manipulation leads to backdoor. An attack has to be approached locally. The exploit has been disclosed to the public and...
CVE-2017-20083
CVE-2017-20083 affects JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Connected sources describe two undocumented OS user accounts on the device enabling SSH access, which can be abused to create a backdoor locally. The issue is rooted in unauthorized accounts and leads to remote access compromi...
CVE-2017-20083 JUNG Smart Visu Server SSH Server backdoor
A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the component SSH Server. The manipulation leads to backdoor. An attack has to be approached locally. The exploit has been disclosed to the public and...
CVE-2017-20083 JUNG Smart Visu Server SSH Server backdoor
A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the component SSH Server. The manipulation leads to backdoor. An attack has to be approached locally. The exploit has been disclosed to the public and...
SUSE SLES12 Security Update : python-Twisted (SUSE-SU-2022:2117-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:2117-1 advisory. - Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 22.2.0, Twisted SSH client and server...
CVE-2022-32974
An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH credentials...
Command injection
An authenticated attacker could read arbitrary files from the underlying operating system of the scanner using a custom crafted compliance audit file without providing any valid SSH credentials...