Ssh vulnerabilities

Products

• Ssh 23
• Tectia Server 12
• Ssh2 9
• Tectia Client 7
• Tectia Connectsecure 4
• Secure Shell 3
• Tectia Connector 3
• Tectia Manager 3

Newest

• ssh tectia server SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session... CVE-2025-32942 7.2 HighOctober 2, 2025
• privx PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed... CVE-2024-30170 9.1 CriticalAugust 6, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• ssh tectia client, tectia connectsecure, tectia server +2 more SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation.... CVE-2021-27892 7.8 HighMarch 15, 2021
• ssh tectia client, tectia connectsecure, tectia server +2 more SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on... CVE-2021-27891 8.8 HighMarch 15, 2021
• ssh tectia client, tectia connectsecure, tectia server +2 more SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in... CVE-2021-27893 7.0 HighMarch 15, 2021
• ssh tectia server The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through... CVE-2012-5975 Public exploit EPSS 35.9% 9.3 HighDecember 4, 2012
• erlang crypto, ssh, erlang erlang\/otp +2 more The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as... CVE-2011-0766 Fix available 7.8 HighMay 31, 2011
• openbsd openssh, ssh tectia client, tectia connector +2 more +4 more Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through... CVE-2008-5161 Public exploitFix available EPSS 18.6% 2.6 LowNovember 19, 2008
• ssh tectia client, tectia server +1 more ssh-signer in SSH Tectia Client and Server 5.x before 5.2.4, and 5.3.x before 5.3.6, on Unix and... CVE-2007-5616 7.2 HighJanuary 9, 2008
• ssh tectia server SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the... CVE-2007-2063 4.4 MediumApril 18, 2007
• ssh tectia client, tectia connector, tectia manager +1 more +3 more SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other... CVE-2006-5484 5.0 MediumOctober 24, 2006
• ssh tectia manager SSH Tectia Management Agent 2.1.2 allows local users to gain root privileges by running a program... CVE-2006-4316 7.2 HighAugust 23, 2006
• ssh tectia client, tectia connector, tectia manager +1 more +3 more Unquoted Windows search path vulnerability in multiple SSH Tectia products, including Client... CVE-2006-4315 7.2 HighAugust 23, 2006
• ssh tectia server SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users... CVE-2005-4310 7.5 HighDecember 17, 2005
• ssh tectia server SSH Tectia Server 4.3.1 and earlier, and SSH Secure Shell for Windows Servers, uses insecure... CVE-2005-2146 4.6 MediumJuly 5, 2005
• ssh tectia server Race condition in SSH Tectia Server 4.0.3 and 4.0.4 for Unix, when the password change plugin ... CVE-2003-1120 3.7 LowDecember 31, 2003
• ssh secure shell SSH Secure Shell before 3.2.9 allows remote attackers to cause a denial of service via malformed... CVE-2003-1119 5.0 MediumDecember 31, 2003
• ssh, ssh ssh2 +1 more SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such... CVE-2002-1715 Public exploit 7.2 HighDecember 31, 2002
• ssh secure shell for servers SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the... CVE-2002-1646 7.5 HighDecember 31, 2002
• ssh ssh2 Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3... CVE-2002-1645 10.0 HighNovember 25, 2002
• ssh ssh2 SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when... CVE-2002-1644 7.2 HighNovember 25, 2002
• ssh secure shell SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the... CVE-2001-0553 Public exploit 7.2 HighAugust 14, 2001
• openbsd openssh, ssh +1 more The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various... CVE-2001-0572 7.5 HighJuly 27, 2001
• ssh ssh2 SSH Communications Security sshd 2.4 for Windows allows remote attackers to create a denial of... CVE-2001-0364 5.0 MediumJune 27, 2001
• openbsd openssh, ssh +1 more Implementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and ... CVE-2001-0361 4.0 MediumJune 27, 2001
• ssh SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login... CVE-2001-0471 Public exploit 7.5 HighMay 24, 2001
• ssh ssh-keygen in ssh 1.2.27 - 1.2.30 with Secure-RPC can allow local attackers to recover a SUN-DES... CVE-2001-0259 Public exploit 3.6 LowMay 7, 2001
• ssh, openbsd openssh +1 more CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary... CVE-2001-0144 Public exploit EPSS 32.4% 10.0 HighMarch 12, 2001
• ssh SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it... CVE-2001-1476 7.5 HighJanuary 18, 2001
• ssh SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay... CVE-2001-1475 7.5 HighJanuary 18, 2001
• ssh SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote... CVE-2001-1474 5.0 MediumJanuary 18, 2001
• ssh The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client... CVE-2001-1473 7.5 HighJanuary 18, 2001
• ssh The IDEA cipher as implemented by SSH1 does not protect the final block of a message against... CVE-2001-1470 5.0 MediumJanuary 18, 2001
• ssh The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without... CVE-2001-1469 5.0 MediumJanuary 18, 2001
• ssh, openbsd openssh +1 more Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to... CVE-2000-0992 Public exploitFix available 5.0 MediumDecember 19, 2000
• ssh SSH 1.2.27 with Kerberos authentication support stores Kerberos tickets in a file which is... CVE-2000-0575 7.2 HighJuly 5, 2000
• ssh, openbsd openssh, ssh ssh2 +2 more The default configuration of SSH allows X forwarding, which could allow a remote attacker to... CVE-2000-0217 5.1 MediumFebruary 24, 2000
• ssh, openbsd openssh +1 more The SSH protocol server sshd allows local users without shell access to redirect a TCP connection... CVE-2000-0143 4.6 MediumFebruary 11, 2000
• ssh The SSH authentication agent follows symlinks via a UNIX domain socket. CVE-1999-0787 Public exploit 2.1 LowSeptember 17, 1999
• ssh ssh2 ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct... CVE-1999-1231 5.0 MediumJune 9, 1999
• ssh ssh2 SSH server (sshd2) before 2.0.12 does not properly record login attempts if the connection is... CVE-1999-1029 7.5 HighMay 13, 1999
• ssh, ssh ssh2 +1 more In some instances of SSH 1.2.27 and 2.0.11 on Linux systems, SSH will allow users with expired... CVE-1999-0398 4.6 MediumJanuary 1, 1999
• ssh A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal... CVE-1999-0248 10.0 HighJanuary 1, 1999
• ssh ssh2 SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports... CVE-1999-1159 4.6 MediumDecember 29, 1998
• ssh SSH 1.2.25 on HP-UX allows access to new user accounts. CVE-1999-0310 7.5 HighSeptember 1, 1998
• ssh secure shell SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB ... CVE-1999-1085 5.0 MediumJune 12, 1998
• ssh Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access... CVE-1999-0013 7.5 HighJanuary 22, 1998