Show filters
2,858 Total Results
Displaying 61-70 of 2,858
Sort by:
Attacker Value
Unknown
CVE-2023-48795
Disclosure Date: December 18, 2023 (last updated April 30, 2024)
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0…
2
Attacker Value
High
CVE-2023-21768
Disclosure Date: January 10, 2023 (last updated January 11, 2025)
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
1
Attacker Value
Unknown
CVE-2022-41033
Disclosure Date: October 11, 2022 (last updated January 11, 2025)
Windows COM+ Event System Service Elevation of Privilege Vulnerability
2
Attacker Value
High
CVE-2022-21874
Disclosure Date: January 11, 2022 (last updated December 21, 2023)
Windows Security Center API Remote Code Execution Vulnerability
1
Attacker Value
High
CVE-2022-21857
Disclosure Date: January 11, 2022 (last updated November 28, 2024)
Active Directory Domain Services Elevation of Privilege Vulnerability
1
Attacker Value
Very High
CVE-2022-21836
Disclosure Date: January 11, 2022 (last updated February 23, 2025)
Windows Certificate Spoofing Vulnerability
1
Attacker Value
Very High
CVE-2022-21833
Disclosure Date: January 11, 2022 (last updated December 21, 2023)
Virtual Machine IDE Drive Elevation of Privilege Vulnerability
1
Attacker Value
Unknown
CVE-2021-43226
Disclosure Date: December 15, 2021 (last updated December 28, 2023)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
1
Attacker Value
Unknown
CVE-2021-43207
Disclosure Date: December 15, 2021 (last updated December 28, 2023)
Windows Common Log File System Driver Elevation of Privilege Vulnerability
1
Attacker Value
Very High
CVE-2021-36942
Disclosure Date: August 12, 2021 (last updated February 23, 2025)
Windows LSA Spoofing Vulnerability
1
