SS
Vendor
Ssh
66
CVEs
0
On KEV
0
New 30D
Products
SS8.4
Ssh
Ssh
23 CVEs0 on KEV0 new
TS8.8
Tectia Server
Ssh
12 CVEs0 on KEV0 new
SS–
Ssh2
Ssh
9 CVEs0 on KEV0 new
TC8.8
Tectia Client
Ssh
7 CVEs0 on KEV0 new
TC8.8
Tectia Connectsecure
Ssh
4 CVEs0 on KEV0 new
SS–
Secure Shell
Ssh
3 CVEs0 on KEV0 new
TC3.7
Tectia Connector
Ssh
3 CVEs0 on KEV0 new
TM–
Tectia Manager
Ssh
3 CVEs0 on KEV0 new
PR9.1
Privx
Ssh
1 CVEs0 on KEV0 new
SS–
Secure Shell For Servers
Ssh
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-30170 | PR Privx Ssh | 9.1 | Aug 6 | PrivX before 34.0 allows data exfiltration and denial of service via the REST API |
| CVE-2023-48795 | SS Ssh Ssh | 5.9 | Dec 18 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some… |
| CVE-2021-27893 | TC Tectia Client Ssh | 7.0 | Mar 15 | SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions |
| CVE-2021-27892 | TC Tectia Client Ssh | 7.8 | Mar 15 | SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation |
| CVE-2021-27891 | TC Tectia Client Ssh | 8.8 | Mar 15 | SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation |
| CVE-2012-5975 | TS Tectia Server Ssh | – | Dec 4 | The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when… |
| CVE-2011-0766 | SS Ssh Ssh | – | May 31 | The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14B03, uses predictable seeds based on… |
| CVE-2008-5161 | TC Tectia Client Ssh | 3.7 | Nov 19 | Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and… |
| CVE-2007-5616 | TC Tectia Client Ssh | – | Jan 9 | ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and Linux allows local users to gain privileges via unspecified vectors |
| CVE-2007-2063 | TS Tectia Server Ssh | – | Apr 18 | SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary processes to be… |
| CVE-2006-5484 | TC Tectia Client Ssh | – | Oct 24 | SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before… |
| CVE-2006-4316 | TM Tectia Manager Ssh | – | Aug 23 | SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program called sshd, which is obtained from a process listing when the "Restart" action… |
| CVE-2006-4315 | TC Tectia Client Ssh | – | Aug 23 | Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client/Server/Connector 5.0.0 and 5.0.1 and Client/Server before 4.4.5, and Manager 2.12 and… |
| CVE-2005-4310 | TS Tectia Server Ssh | – | Dec 17 | SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials |
| CVE-2005-2146 | TS Tectia Server Ssh | – | Jul 5 | SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure permissions when generating the Secure Shell host identification key, which allows… |
| CVE-2003-1119 | SS Secure Shell Ssh | – | Dec 31 | SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed BER/DER packets |
| CVE-2003-1120 | TS Tectia Server Ssh | – | Dec 31 | Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin (ssh-passwd-plugin) is enabled, allows local users to obtain the server's private key |
| CVE-2002-1715 | SS Ssh Ssh | – | Dec 31 | SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then… |
| CVE-2002-1646 | SS Secure Shell For Servers Ssh | – | Dec 31 | SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g |
| CVE-2002-1644 | SS Ssh2 Ssh | – | Nov 25 | SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the… |
| CVE-2002-1645 | SS Ssh2 Ssh | – | Nov 25 | Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL |
| CVE-2001-0572 | SS Ssh Ssh | – | Aug 22 | The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information… |
| CVE-2001-0553 | SS Secure Shell Ssh | – | Aug 14 | SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short… |
| CVE-2001-0471 | SS Ssh Ssh | – | Jun 27 | SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via… |
| CVE-2001-0361 | SS Ssh Ssh | – | Jun 27 | Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and (3) ssh-1 up to version 1.2.31, in certain configurations, allow a remote attacker… |
| CVE-2001-0364 | SS Ssh2 Ssh | – | Jun 27 | SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of service via a large number of simultaneous connections |
| CVE-2001-0259 | SS Ssh Ssh | – | Jun 2 | ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES-1 magic phrase generated by another user, which the attacker can use to decrypt… |
| CVE-2001-0144 | SS Ssh Ssh | – | Mar 12 | CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow |
| CVE-2001-1475 | SS Ssh Ssh | – | Jan 18 | SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is generated |
| CVE-2001-1474 | SS Ssh Ssh | – | Jan 18 | SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections to the localhost by poisoning the… |
| CVE-2001-1473 | SS Ssh Ssh | – | Jan 18 | The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the… |
| CVE-2001-1470 | SS Ssh Ssh | – | Jan 18 | The IDEA cipher as implemented by SSH1 does not protect the final block of a message against modification, which allows remote attackers to modify the block without detection by… |
| CVE-2001-1469 | SS Ssh Ssh | – | Jan 18 | The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a… |
| CVE-2001-1476 | SS Ssh Ssh | – | Jan 18 | SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions of user passwords by replaying user… |
| CVE-2000-0992 | SS Ssh Ssh | – | Dec 19 | Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a |
| CVE-2000-0575 | SS Ssh Ssh | – | Jul 5 | SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is created in the current directory of the user who is logging in, which could allow remote… |
| CVE-2000-0217 | SS Ssh Ssh | – | Feb 24 | The default configuration of SSH allows X forwarding, which could allow a remote attacker to control a client's X sessions via a malicious xauth program |
| CVE-2000-0143 | SS Ssh Ssh | – | Feb 11 | The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for… |
| CVE-1999-0787 | SS Ssh Ssh | – | Sep 17 | The SSH authentication agent follows symlinks via a UNIX domain socket |
| CVE-1999-1231 | SS Ssh2 Ssh | – | Jun 9 | ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password… |
| CVE-1999-1029 | SS Ssh2 Ssh | – | May 13 | SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is closed before the maximum number of tries, allowing a remote attacker to guess the… |
| CVE-1999-0398 | SS Ssh Ssh | – | Jan 1 | In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired accounts to login |
| CVE-1999-0248 | SS Ssh Ssh | – | Jan 1 | A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials |
| CVE-1999-1159 | SS Ssh2 Ssh | – | Dec 29 | SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root |
| CVE-1999-0310 | SS Ssh Ssh | – | Sep 1 | SSH 1.2.25 on HP-UX allows access to new user accounts |
| CVE-1999-1085 | SS Secure Shell Ssh | – | Jun 12 | SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into… |
| CVE-1999-0013 | SS Ssh Ssh | 8.4 | Jan 22 | Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user |