İçeriğe atla
Noroxi

SSH kayıtları

SSH üreticisine ait 47 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 2 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %4,3
Pre-auth RCE
2
Düzeltme kaydı olan
%8,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 21
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

47 kayıt
  • CVE-2008-5161
    60Bu hafta

    Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through

    DüşükCVSS 3,7SilahlaştırılmışEPSS %18

    ssh · tectia client19 Kas 2008

  • CVE-2023-48795
    51Planlayın

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    OrtaCVSS 5,9Kavram kanıtıEPSS %93

    ssh · ssh18 Ara 2023

  • CVE-2001-0144
    50Planlayın

    CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an in

    KritikCVSS 10,0Kavram kanıtıEPSS %32

    ssh · ssh12 Mar 2001

  • CVE-2012-5975
    48Planlayın

    The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 thro

    KritikCVSS 9,3SilahlaştırılmışEPSS %35

    ssh · tectia server4 Ara 2012

  • CVE-2002-1645
    42Planlayın

    Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbi

    KritikCVSS 10,0İstismar yokEPSS %7

    ssh · ssh225 Kas 2002

  • CVE-1999-0248
    40Planlayın

    A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.

    KritikCVSS 10,0İstismar yokEPSS %1

    ssh · ssh1 Oca 1999

  • CVE-2024-30170
    36İzleyin

    PrivX before 34.0 allows data exfiltration and denial of service via the REST API.

    KritikCVSS 9,1İstismar yokEPSS %0

    ssh · privx6 Ağu 2024

  • CVE-2021-27891
    35İzleyin

    SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation.

    YüksekCVSS 8,8İstismar yokEPSS %1

    ssh · tectia client15 Mar 2021

  • CVE-1999-0013
    33İzleyin

    Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent u

    YüksekCVSS 8,4İstismar yokEPSS %1

    ssh · ssh22 Oca 1998

  • CVE-2001-0572
    32İzleyin

    The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker

    YüksekCVSS 7,5İstismar yokEPSS %7

    ssh · ssh22 Ağu 2001

  • CVE-2001-1473
    32İzleyin

    The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by c

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    ssh · ssh18 Oca 2001

  • CVE-2001-0471
    32İzleyin

    SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to co

    YüksekCVSS 7,5Kavram kanıtıEPSS %5

    ssh · ssh27 Haz 2001

  • CVE-2011-0766
    32İzleyin

    The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14

    YüksekCVSS 7,8İstismar yokEPSS %3

    erlang · crypto31 May 2011

  • CVE-2002-1646
    31İzleyin

    SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure

    YüksekCVSS 7,5İstismar yokEPSS %3

    ssh · secure shell for servers31 Ara 2002

  • CVE-2021-27892
    31İzleyin

    SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation.

    YüksekCVSS 7,8İstismar yokEPSS %0

    ssh · tectia client15 Mar 2021

  • CVE-1999-1029
    30İzleyin

    SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, all

    YüksekCVSS 7,5İstismar yokEPSS %1

    ssh · ssh213 May 1999

  • CVE-2001-1475
    30İzleyin

    SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is genera

    YüksekCVSS 7,5İstismar yokEPSS %1

    ssh · ssh18 Oca 2001

  • CVE-1999-0310
    30İzleyin

    SSH 1.2.25 on HP-UX allows access to new user accounts.

    YüksekCVSS 7,5İstismar yokEPSS %1

    ssh · ssh1 Eyl 1998

  • CVE-2005-4310
    30İzleyin

    SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials.

    YüksekCVSS 7,5İstismar yokEPSS %1

    ssh · tectia server16 Ara 2005

  • CVE-2001-1476
    30İzleyin

    SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions

    YüksekCVSS 7,5İstismar yokEPSS %1

    ssh · ssh18 Oca 2001

  • CVE-2001-0553
    28İzleyin

    SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to ga

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    ssh · secure shell14 Ağu 2001

  • CVE-2007-5616
    28İzleyin

    ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges

    YüksekCVSS 7,2İstismar yokEPSS %0

    ssh · tectia client9 Oca 2008

  • CVE-2002-1715
    28İzleyin

    SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    ssh · ssh31 Ara 2002

  • CVE-2000-0575
    28İzleyin

    SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who

    YüksekCVSS 7,2İstismar yokEPSS %0

    ssh · ssh5 Tem 2000

  • CVE-2002-1644
    28İzleyin

    SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to

    YüksekCVSS 7,2İstismar yokEPSS %0

    ssh · ssh225 Kas 2002