All CVEs — page 389 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw allows authentication bypass via LDAP injection, enabling unauthorized access to SSH servers using Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5.
The vulnerability in LdapPasswordAuthenticator allows attackers to bypass authentication checks, compromising user access control.
The flaw allows memory exhaustion in SFTP clients when receiving unsolicited replies from malicious servers, potentially leading to denial of service. This affects Apache MINA SSHD versions 0.9.0 through 2.19.0 and 3.0.0-M1 through 3.0.0-M5.
The flaw allows a user to authenticate successfully by presenting the same public key twice, bypassing the requirement for two different keys. This matters because it undermines the security of multi-authentication schemes.
The flaw allows an authenticated remote attacker to cause incorrect data processing or a denial-of-service condition by exploiting improper synchronization in monitoring functionality.
The flaw allows for an authentication bypass in the asynchronous authentication mechanism of Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5, potentially leading to unauthorized access.
This flaw allows man-in-the-middle attackers to gain unauthorized access to sensitive data in BVMS versions 4.5 to 12.3, posing a significant security risk.
The Product Designer App plugin allows unauthenticated attackers to perform directory traversal attacks by manipulating the 'svg' parameter, enabling them to read arbitrary files on the server that may contain sensitive data.