Lucene search
+L

19795 matches found

osv_ghsa
osv_ghsa
•added 2023/09/20 6:30 a.m.•46 views

GHSA-PPJH-XP5V-46WC Croc sender may send dangerous new files to receiver

An issue was discovered in Croc before 9.6.16. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...

7.8CVSS7.2AI score0.00365EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2023/09/20 6:30 a.m.•43 views

Croc sender may send dangerous new files to receiver

An issue was discovered in Croc before 9.6.16. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...

7.8CVSS7.2AI score0.00365EPSS
SaveExploits1References7Affected Software1
Citrix
Citrix
•added 2023/09/20 12:00 a.m.•20 views

The high MGMT CPU issue is preventing users access to Netscaler via GUI or SSH.

After upgrading Netscaler to version 13.1-42+, executing the "" command results in a high management CPU issue, causing users to be unable to log in to Netscaler via the GUI or SSH...

7.1AI score
SaveExploits0
osv_cve
osv_cve
•added 2023/09/20 12:00 a.m.•46 views

CVE-2023-43619

An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...

7AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/09/20 12:00 a.m.•19 views

CVE-2023-43619

An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...

7.2AI score0.00365EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/09/19 12:00 a.m.•18 views

PT-2023-28880

Name of the Vulnerable Software and Affected Versions Croc versions through 9.6.5 Description An issue was discovered in Croc where a sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized keys file. Recommendations For Croc versions through 9.6.5, upda...

9.8CVSS7.2AI score0.00365EPSS
SaveExploits1References19
BDU FSTEC
BDU FSTEC
•added 2023/09/19 12:00 a.m.•17 views

golang.org/x/crypto/ssh DoS

The vulnerability of the golang.org/x/crypto/ssh library for the Go programming language is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to cause SSH servers to fail...

7.8CVSS7.8AI score0.03963EPSS
SaveExploits0References18Affected Software11
BDU FSTEC
BDU FSTEC
•added 2023/09/16 12:00 a.m.•28 views

OpenWrt sshkeys.js XSS

The vulnerability of the sshkeys.js component in the embedded operating system OpenWrt is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6.2AI score0.00611EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/16 12:00 a.m.•21 views

golang.org/x/crypto/ssh SSH Failure

The vulnerability of the golang.org/x/crypto/ssh library in the Go programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause SSH servers to fail...

7.8CVSS7.5AI score0.03179EPSS
SaveExploits0References5Affected Software2
OpenVAS
OpenVAS
•added 2023/09/16 12:00 a.m.•16 views

Fedora: Security Advisory (FEDORA-2023-467632ecbe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.6AI score0.0011EPSS
SaveExploits0References4
IBM Security Bulletins
IBM Security Bulletins
•added 2023/09/15 1:29 p.m.•69 views

Security Bulletin: Vulnerabilities in cURL libcurl might affect IBM Spectrum Copy Data Management

Summary IBM Spectrum Copy Data Management can be affected by vulnerabilities in cURL libcurl. Vulnerabilities include exploiting the vulnerabilities to reuse a previously created connection even when the GSS delegation, to pass on user name and "telnet options" for the server negotiation, to caus...

9.8CVSS6.8AI score0.0244EPSS
SaveExploits6Affected Software1
Citrix
Citrix
•added 2023/09/15 12:00 a.m.•25 views

Vulnerability CVE-2008-5161 (SSH Server CBC Mode Ciphers Enabled) on SDX

Regarding vulnerability CVE-2008-5161 SSH Server CBC Mode Ciphers Enabled, we need to follow the below article to mitigate this vulnerability. Addressing False Positives from CBC and MAC Vulnerability Scans of NetScaler SSHD citrix.com However, we are unable to perform the steps mentioned in the...

2.6CVSS6.6AI score0.18551EPSS
SaveExploits1
NVD
NVD
•added 2023/09/14 9:15 p.m.•55 views

CVE-2023-41160

A Stored Cross-Site Scripting XSS vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key...

5.4CVSS5.2AI score0.006EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/09/14 9:15 p.m.•19 views

CVE-2023-41160

A Stored Cross-Site Scripting XSS vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key...

5.4CVSS6AI score0.006EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/14 9:15 p.m.•32 views

Cross site scripting

A Stored Cross-Site Scripting XSS vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key...

4.9CVSS5.2AI score0.006EPSS
SaveExploits1References2Affected Software1
osv_usn
osv_usn
•added 2023/09/14 3:03 p.m.•23 views

USN-6371-1 libssh2 vulnerability

It was discovered that libssh2 incorrectly handled memory access. An attacker could possibly use this issue to cause a crash...

7.5CVSS7.3AI score0.01155EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/09/14 12:00 a.m.•67 views

CVE-2023-41160

A Stored Cross-Site Scripting XSS vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key...

5.4AI score0.006EPSS
SaveExploits1References2
Citrix
Citrix
•added 2023/09/14 12:00 a.m.•35 views

How to Enable/Disable SSH on XenServer Host

How to Enable/Disable SSH on XenServer Host...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/14 12:00 a.m.•8 views

CVE-2023-41160: Improper Neutralization of Input During Web Page Generation

A Stored Cross-Site Scripting XSS vulnerability in the SSH configuration tab in Usermin 2.001 allows remote attackers to inject arbitrary web script or HTML via the key name field while adding an authorized key...

5.4CVSS6AI score0.006EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/14 12:00 a.m.•155 views

CVE-2023-41160

CVE-2023-41160 describes a stored XSS in the SSH configuration tab of Usermin 2.001 caused by injecting scripts or HTML through the key name field when adding an authorized key. The vulnerability is confirmed across multiple sources (NVD, Red Hat, CVE list, CNNSA-like feeds) with CVSSv3.1 base me...

5.4CVSS6AI score0.006EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder