WI
Product
Winscp
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 6Low 0
Watch
Add Winscp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-6110 | 6.8 | Jan 31 | In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for… Affected: through 5.13 |
| CVE-2019-6109 | 6.8 | Jan 31 | An issue was discovered in OpenSSH 7.9 Affected: through 5.13 |
| CVE-2024-31497 | 5.9 | Apr 15 | In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60… Affected: before 6.3.3 |
| CVE-2023-48795 | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… Affected: before 6.2.2 |
| CVE-2019-6111 | 5.9 | Jan 31 | An issue was discovered in OpenSSH 7.9 Affected: through 5.1.3 |
| CVE-2018-20685 | 5.3 | Jan 10 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of Affected: through 5.13 |
Showing 6