Rezultati pretraživanja za 'Proizvođač: winscp'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-6109 | 4.0 | An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes t | 2026-05-28 19:16:34 | 2019-01-31 18:29:00 |
| CVE-2019-6111 | 5.8 | An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned | 2025-12-18 15:15:48 | 2019-01-31 18:29:00 |
| CVE-2019-6110 | 4.0 | In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transfe | 2025-12-18 15:15:47 | 2019-01-31 18:29:00 |
| CVE-2018-20685 | 2.6 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side. | 2025-12-17 22:15:55 | 2019-01-10 21:29:00 |
| CVE-2023-48795 | 5.9 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client a | 2025-09-29 21:56:10 | 2023-12-18 16:15:10 |
| CVE-2024-31497 | 5.9 | In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. This is especially important in a scenario where an adversary is abl | 2025-03-27 15:15:51 | 2024-04-15 20:15:11 |
| CVE-2006-3015 | 7.1 | Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI. | 2024-02-13 17:49:43 | 2006-06-14 15:06:00 |
| CVE-2013-4852 | 6.8 | Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negativ | 2021-08-06 16:58:00 | 2013-08-19 23:55:00 |
| CVE-2021-3331 | 10.0 | WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For example, this is exploitable in a default installation in which WinSCP is the handler for sftp | 2021-02-04 15:59:00 | 2021-01-27 21:15:00 |
| CVE-2020-28864 | 7.5 | Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a long file name. | 2020-12-02 19:20:00 | 2020-11-23 19:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2
Zapisa po stranici: