CVE-2018-15473

A user enumeration vulnerability flaw was found in OpenSSH, though version 7.7. The vulnerability occurs by not delaying bailout for an invalid authenticated user until after the packet containing the request has been fully parsed. The highest threat from this vulnerability is to data...

OpenSSH < 7.8 User Enumeration Vulnerability - Linux

OpenSSH is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

OpenSSH < 7.8 User Enumeration Vulnerability - Windows

OpenSSH is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

Atlassian JIRA 7.6.5 / 7.7.x < 7.7.4 / 7.8.x < 7.8.4 / 7.9.x < 7.9.2 Multiple Vulnerabilities (SB18-141)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by multiple vulnerabilities: - Atlassian JIRA contains a flaw that allows a reflected cross-site scripting XSS attack. This flaw exists because the issue collector...

SugarCRM php-saml Vulnerability

SugarCRM is prone to a signature validation vulnerability in php-saml. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apple QuickTime Multiple Buffer Overflow Vulnerabilities (Windows)

The host is running Apple QuickTime and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: gbapplequicktimemultbofvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Apple QuickTime Multiple Buffer Overflow Vulnerabilities Windows Authors: Madhuri D Copyright:...

PHP-Nuke 7.7 EV Search Module - SQL Injection

source: https://www.securityfocus.com/bid/16186/info PHPNuke EV is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...