vandyke records
4 published records for vendor vandyke.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 25%
- Pre-auth RCE
- 3
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-190 Integer Overflow or Wraparound1
- CWE-354 Improper Validation of Integrity Check Value1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
51Plan | CVE-2023-48795Proof of concept | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypasssh · ssh · CWE-354 | Medium5.9 | — | 93.5% | Dec 18, 2023 |
49Plan | CVE-2022-28054No exploit | Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code viavandyke · vshell | Critical9.8 | — | 31.9% | May 2, 2022 |
46Plan | CVE-2011-5164Weaponized | Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a cvandyke · absoluteftp · CWE-119 | Critical9.3 | — | 28.6% | Sep 15, 2012 |
41Plan | CVE-2020-12651No exploit | SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can vandyke · securecrt · CWE-190 | Critical9.8 | — | 6.6% | May 15, 2020 |
- CVE-2023-4879551Plan
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas
MediumCVSS 5.9Proof of conceptEPSS 94%ssh · sshDec 18, 2023
- CVE-2022-2805449Plan
Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via
CriticalCVSS 9.8No exploitEPSS 32%vandyke · vshellMay 2, 2022
- CVE-2011-516446Plan
Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a c
CriticalCVSS 9.3WeaponizedEPSS 29%vandyke · absoluteftpSep 15, 2012
- CVE-2020-1265141Plan
SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can
CriticalCVSS 9.8No exploitEPSS 7%vandyke · securecrtMay 15, 2020