19958 matches found
ALSA-2023:2645 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: the functions orderhostkeyalgs and listhostkeytypes leads to double-free vulnerabili...
Siemens SCALANCE security vulnerabilities
Siemens SCALANCE LPE9403 is the local processing driver. A security vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to gain access to the SSH interface on an affected device, thereby interfering with the integrity of the mutex object and the data it...
CVE-2023-27409: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A path traversal vulnerability was found in the deviceinfo binary via the mac parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file...
CVE-2023-20046: Authentication Bypass by Alternate Name
A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied credentials. An attacker could exploit this...
EulerOS 2.0 SP10 : curl (EulerOS-SA-2023-1798)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability in input validation exists in curl 8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously...
Huawei EulerOS: Security Advisory for curl (EulerOS-SA-2023-1816)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HammerSpace GDE / GFS 4.6.6-324 Authentication Bypass
Affected Product: HammerSpace Global Data Environment / Global File System - https://hammerspace.com/product Affected Versions: v4.6.6-324 and below with default installation/configuration. Vendor Notified: Yes, sometime between: 08/2022 and 10/2022, confirmed 2023-03-21 there is a fix in an...
PT-2023-2807
Name of the Vulnerable Software and Affected Versions SCALANCE LPE9403 versions prior to V2.1 Description A path traversal vulnerability was found in the deviceinfo binary via the mac parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to...
Siemens SCALANCE path traversal vulnerability
Siemens SCALANCE LPE9403 is the local processing driver. A path traversal vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to gain access to the SSH interface on an affected device to read the contents of any file named address...
CVE-2023-27408: Creation of Temporary File With Insecure Permissions
A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. The i2c mutex file is created with the permissions bits of -rw-rw-rw-. This file is used as a mutex for multiple applications interacting with i2c. This could allow an authenticated attacker with access to the SSH interfac...
Internet Bug Bounty: Privilege Esacalation at Apache Airflow 2.5.1
A vulnerability was found in Apache Airflow before version 2.6.0 that allowed local Linux users to access sensitive files, such as SSH private keys, owned by the account that operates Airflow. The issue was caused by Airflow setting log files to vulnerable privileges, allowing any Linux user on t...
EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2023-1797)
According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory,...
Huawei EulerOS: Security Advisory for xorg-x11-server (EulerOS-SA-2023-1797)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP11 : xorg-x11-server (EulerOS-SA-2023-1775)
According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory,...
Mageia: Security Advisory (MGASA-2023-0162)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: cloud-init-23.1.2-1.fc38
Cloud-init is a set of init scripts for cloud instances. Cloud instances need special scripts to run during initialization to retrieve and install ssh keys and to let the user run various scripts...
TP-Link T2600G-28SQ Unauthorized Access
The vulnerability of TP-Link T2600G-28SQ switch’s microprogramming software is related to errors in managing registration data when processing SSH keys. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Cisco StarOS Privilege Escalation
The vulnerability in the SSH authentication function based on software credentials of Cisco StarOS arises due to insufficient verification of the user-provided credentials. Exploiting this vulnerability allows a malicious actor to elevate privileges on a vulnerable device...
