Rezultati pretraživanja za 'Proizvođač: winscp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-20684 | 6.4 | In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp. | 2020-01-15 20:15:00 | 2019-01-10 21:29:00 |
| CVE-2007-4909 | 9.3 | Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by | 2018-10-15 21:38:00 | 2007-09-17 17:17:00 |
| CVE-2014-2735 | 5.8 | WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL s | 2018-10-09 19:43:00 | 2014-04-22 13:06:00 |
| CVE-2002-1360 | 10.0 | Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attackers to cause a denial of service or possibly execute arbitrary code du | 2017-10-11 01:29:00 | 2002-12-23 05:00:00 |
| CVE-2002-1359 | 10.0 | Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH | 2017-10-11 01:29:00 | 2002-12-23 05:00:00 |
| CVE-2002-1358 | 10.0 | Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol test suite. | 2017-10-11 01:29:00 | 2002-12-23 05:00:00 |
| CVE-2002-1357 | 10.0 | Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH | 2017-10-11 01:29:00 | 2002-12-23 05:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: