Winscp vulnerabilities

Products

• Winscp 17

Newest

• putty, tigris tortoisesvn, tortoisegit +3 more +5 more In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to... CVE-2024-31497 Public exploitFix available 5.9 MediumApril 15, 2024
• 9bis kitty, apache sshd, sshj +68 more +70 more Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• winscp WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler... CVE-2021-3331 9.8 CriticalJanuary 27, 2021
• winscp Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or... CVE-2020-28864 9.8 CriticalNovember 23, 2020
• openbsd openssh, netapp element software, ontap select deploy +7 more +9 more In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a... CVE-2019-6110 Public exploit EPSS 24.9% 6.8 MediumJanuary 18, 2019
• openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 more An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp... CVE-2019-6111 Public exploitFix available EPSS 58.2% 5.9 MediumJanuary 14, 2019
• openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 more An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display... CVE-2019-6109 Fix available 6.8 MediumJanuary 14, 2019
• winscp In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept... CVE-2018-20684 7.5 HighJanuary 10, 2019
• openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 more In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access... CVE-2018-20685 Fix available 5.3 MediumJanuary 10, 2019
• winscp WinSCP before 5.5.3, when FTP with TLS is used, does not verify that the server hostname matches... CVE-2014-2735 5.8 MediumApril 21, 2014
• putty, winscp, debian linux +1 more +3 more Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use... CVE-2013-4852 Fix available 6.8 MediumAugust 9, 2013
• winscp Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file... CVE-2007-4909 Public exploit 9.3 HighSeptember 17, 2007
• winscp Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or... CVE-2006-3015 Public exploit 7.1 HighJune 14, 2006
• cisco ios, fissh ssh client, intersoft securenetterm +4 more +6 more Multiple SSH2 servers and clients do not properly handle strings with null characters in them... CVE-2002-1360 10.0 HighDecember 17, 2002
• cisco ios, fissh ssh client, intersoft securenetterm +4 more +6 more Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may... CVE-2002-1359 Public exploit EPSS 80.2% 10.0 HighDecember 17, 2002
• cisco ios, fissh ssh client, intersoft securenetterm +4 more +6 more Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings,... CVE-2002-1358 10.0 HighDecember 17, 2002
• cisco ios, fissh ssh client, intersoft securenetterm +4 more +6 more Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect... CVE-2002-1357 10.0 HighDecember 17, 2002