Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Ssh2 Project Component: Ssh2 Clear all filters
TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354
TI-2020-16122 CVE-2020-26301 · GHSA-652h-xwhf-q4h6

Command injection in mscdex/ssh2

Priority MEDIUM 49

ssh2 is client and server modules written in pure JavaScript for node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.03832 Published 2021-09-20 Partial fix · 1.4.0 CWE-78