Latest winscp winscp Vulnerabilities

● CVE-2024-31497

Secret Key Recovery of NIST P-521 Private Keys Through Biased ECDSA Nonces in PuTTY Client

redhat/PuTTY<0.81

redhat/FileZilla<3.67.0

debian/filezilla<=3.39.0-2+deb10u1<=3.52.2-3+deb11u1<=3.63.0-1+deb12u3<=3.66.5-2

debian/putty<=0.70-6<=0.74-1+deb11u1~deb10u1<=0.74-1+deb11u1<=0.78-2+deb12u1

Putty Putty>=0.68<0.81

Filezilla-project Filezilla Client<3.67.0

and 6 more

● CVE-2023-48795

Prefix Truncation Attacks in SSH Specification (Terrapin Attack)

pip/paramiko>=2.5.0<3.4.0

go/golang.org/x/crypto<0.17.0

rust/russh<0.40.2

Apple macOS Sonoma<14.4

Openbsd Openssh<9.6

Putty Putty<0.80

and 128 more

● CVE-2021-3331

WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For example, this is exploitable in a default in...

Winscp Winscp<5.17.10

● CVE-2020-28864

Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a long file name.

Winscp Winscp=5.17.8

● CVE-2019-6110

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI co...

debian/openssh<=1:7.9p1-10+deb10u2<=1:7.9p1-10+deb10u4<=1:8.4p1-5+deb11u2<=1:8.4p1-5+deb11u3<=1:9.2p1-2+deb12u1<=1:9.2p1-2+deb12u2<=1:9.6p1-2

Openbsd Openssh<=7.9

Winscp Winscp<=5.13

Netapp Element Software

Netapp Ontap Select Deploy

Netapp Storage Automation Store

and 4 more

● CVE-2019-6111

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only perfo...

ubuntu/openssh<1:7.6

ubuntu/openssh<1:7.7

ubuntu/openssh<1:6.6

ubuntu/openssh<1:7.2

Openbsd Openssh<=7.9

Winscp Winscp<=5.1.3

and 76 more

● CVE-2018-20684

In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCP...

Winscp Winscp<=5.13.7

● CVE-2018-20685

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the targ...

debian/openssh<=1:7.4p1-10<=1:7.9p1-4<=1:7.4p1-10+deb9u4

debian/openssh

Openbsd Openssh<=7.9

Winscp Winscp<=5.13

Netapp Cloud Backup

Netapp Element Software

and 88 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.