Vulnerabilities > SSH > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-08-06 CVE-2024-30170 Unspecified vulnerability in SSH Privx
PrivX before 34.0 allows data exfiltration and denial of service via the REST API.
network
low complexity
ssh
critical
9.1
2012-12-04 CVE-2012-5975 Improper Authentication vulnerability in SSH Tectia Server
The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a crafted session involving entry of blank passwords, as demonstrated by a root login session from a modified OpenSSH client with an added input_userauth_passwd_changereq call in sshconnect2.c.
network
ssh linux CWE-287
critical
9.3
2002-11-25 CVE-2002-1645 Buffer Overflow vulnerability in SSH Communications Secure Shell Windows Client URL Catcher
Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.
network
low complexity
ssh
critical
10.0
2001-03-12 CVE-2001-0144 CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
network
low complexity
openbsd ssh
critical
10.0
1999-01-01 CVE-1999-0248 Unspecified vulnerability in SSH 1.2.27
A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials.
network
low complexity
ssh
critical
10.0