Vandyke

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-48795 Dec 18, 16:15 LIB MEDIUM POC PATCH THREAT This Month

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and EPSS exploitation probability 53.6%.

Authentication Bypass Apache Java Node.js Golang +85

NVD GitHub

CVSS 3.1

5.9

EPSS

53.6%

Threat

4.3

CVE-2022-28054 May 02, 14:15 CRITICAL Act Now

Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft Vshell Vandyke

NVD

CVSS 3.1

9.8

EPSS

29.7%

CVE-2020-12651 May 15, 18:15 CRITICAL POC Act Now

SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line number to CSI functions that exceeds INT_MAX. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Integer Overflow Securecrt Vandyke

NVD

CVSS 3.1

9.8

EPSS

6.6%

CVE-2023-48795 LIB

EPSS 54% 4.3 CVSS 5.9

MEDIUM POC PATCH THREAT This Month

Authentication Bypass Apache Java +87

NVD GitHub

CVE-2022-28054

EPSS 30% CVSS 9.8

CRITICAL Act Now

RCE Microsoft Vshell +1

NVD

CVE-2020-12651

EPSS 7% CVSS 9.8

CRITICAL POC Act Now

RCE Buffer Overflow Integer Overflow +2

NVD