İçeriğe atla
Noroxi

winscp kayıtları

winscp üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %5,9
Pre-auth RCE
6
Düzeltme kaydı olan
%41,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 23
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2002-1359
    64Bu hafta

    Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial o

    KritikCVSS 10,0SilahlaştırılmışEPSS %80

    cisco · ios23 Ara 2002

  • CVE-2023-48795
    51Planlayın

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    OrtaCVSS 5,9Kavram kanıtıEPSS %93

    ssh · ssh18 Ara 2023

  • CVE-2002-1357
    43Planlayın

    Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote a

    KritikCVSS 10,0İstismar yokEPSS %9

    cisco · ios23 Ara 2002

  • CVE-2002-1360
    42Planlayın

    Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a lengt

    KritikCVSS 10,0İstismar yokEPSS %6

    cisco · ios23 Ara 2002

  • CVE-2002-1358
    42Planlayın

    Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a d

    KritikCVSS 10,0İstismar yokEPSS %5

    cisco · ios23 Ara 2002

  • CVE-2021-3331
    41Planlayın

    WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session

    KritikCVSS 9,8İstismar yokEPSS %7

    winscp · winscp27 Oca 2021

  • CVE-2019-6111
    40Planlayın

    An issue was discovered in OpenSSH 7.9.

    OrtaCVSS 5,9Kavram kanıtıEPSS %58

    openbsd · openssh31 Oca 2019

  • CVE-2020-28864
    40Planlayın

    Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a

    KritikCVSS 9,8İstismar yokEPSS %2

    winscp · winscp23 Kas 2020

  • CVE-2007-4909
    38İzleyin

    Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-tra

    KritikCVSS 9,3Kavram kanıtıEPSS %3

    winscp · winscp17 Eyl 2007

  • CVE-2019-6110
    34İzleyin

    In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker)

    OrtaCVSS 6,8Kavram kanıtıEPSS %24

    openbsd · openssh31 Oca 2019

  • CVE-2018-20684
    31İzleyin

    In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially o

    YüksekCVSS 7,5İstismar yokEPSS %2

    winscp · winscp10 Oca 2019

  • CVE-2006-3015
    30İzleyin

    Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces

    YüksekCVSS 7,1Kavram kanıtıEPSS %6

    winscp · winscp14 Haz 2006

  • CVE-2019-6109
    28İzleyin

    An issue was discovered in OpenSSH 7.9.

    OrtaCVSS 6,8İstismar yokEPSS %3

    openbsd · openssh31 Oca 2019

  • CVE-2013-4852
    28İzleyin

    Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a deni

    OrtaCVSS 6,8İstismar yokEPSS %3

    winscp · winscp19 Ağu 2013

  • CVE-2024-31497
    25İzleyin

    In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a qui

    OrtaCVSS 5,9Kavram kanıtıEPSS %5

    putty · putty15 Nis 2024

  • CVE-2014-2735
    23İzleyin

    WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the subject's Common Name

    OrtaCVSS 5,8İstismar yokEPSS %0

    winscp · winscp22 Nis 2014

  • CVE-2018-20685
    22İzleyin

    In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of .

    OrtaCVSS 5,3İstismar yokEPSS %3

    openbsd · openssh10 Oca 2019