Known vulnerabilities in openssh-askpass - page 2

Vendor: OpenAnolis
Software: openssh-askpass
Software CPE: cpe:2.3:o:openanolis:openssh-askpass:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 32
Public exploits: 9
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssh-askpass openssh-askpass is affected by 32 known vulnerabilities: 1 critical, 2 high, 9 medium, 20 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 9.3p2-2, 9.6p1-2 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 8.0p1-20.0.1, 8.0p1-20.0.4, 9.3p2-6 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU78454 - Untrusted Search Path
CVE-2023-38408		 CWE-426 Medium
Available
No
 7.4p1-23, 8.0p1-18.0.1, 9.0p1-9 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU71771 - Double Free
CVE-2023-25136		 CWE-415 High
Available
No
 9.0p1-9 02.02.2023 SB2023020247
SB2023020304
SB2023021660
and 11 more
#VU58333 - Improper Privilege Management
CVE-2021-41617		 CWE-269 Low
No
No
 7.4p1-22, 8.0p1-13.0.1 23.11.2021 SB2021092601
SB2021112330
SB2021120119
and 38 more
#VU32937 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-14145		 CWE-327 Medium
No
No
 8.0p1-13.0.1 30.07.2020 SB2020073043
SB2020121421
SB2021052625
and 11 more
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109		 CWE-451 Low
No
No
 8.0p1-13.0.1 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16988 - Improper input validation
CVE-2019-6111		 CWE-20 Low
Available
No
 8.0p1-13.0.1 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU16946 - Improper Access Control
CVE-2018-20685		 CWE-284 Low
No
No
 8.0p1-13.0.1 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more
#VU14440 - Error Handling
CVE-2018-15473		 CWE-388 Medium
Available
No
 7.4p1-21 17.08.2018 SB2018081603
SB2018082309
SB2018090702
and 19 more
#VU9333 - Permissions, Privileges, and Access Controls
CVE-2017-15906		 CWE-264 Low
No
No
 7.4p1-21 15.11.2017 SB2017111501
SB2017111502
SB2018010803
and 14 more
#VU2015 - Improper input validation
CVE-2016-10009		 CWE-20 Low
Available
No
 7.4p1-23, 8.0p1-18.0.1, 9.0p1-9 19.12.2016 SB2016122003
SB2017011102
SB2016122004
and 21 more


Showing elements 21 - 40 out of 32