# cves

cve_id: CVE-2023-38408
vendor: Cisco
severity: Critical
published_date: 2023-07-20
status: Open
created_at: 2026-01-28 18:33:02
updated_at: 2026-02-09 17:12:57
description:
  The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.


cve_id: CVE-2018-15473
vendor: Juniper
severity: Medium
published_date: 2018-08-17
status: Open
created_at: 2026-01-28 19:20:28
updated_at: 2026-02-09 17:12:57
description:
  OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.


cve_id: CVE-2011-4862
vendor: Avocent
severity: High
published_date: 2011-12-25
status: Open
created_at: 2026-01-30 17:49:57
updated_at: 2026-02-09 17:12:57
description:
  Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.


cve_id: CVE-2013-4786
vendor: Falcon
severity: High
published_date: 2013-07-08
status: Open
created_at: 2026-01-30 17:52:07
updated_at: 2026-02-09 17:12:57
description:
  The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.


cve_id: CVE-2015-7871
vendor: Juniper
severity: Critical
published_date: 2017-08-07
status: Open
created_at: 2026-01-30 18:04:07
updated_at: 2026-02-09 17:12:57
description:
  Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.


cve_id: CVE-2023-3824
vendor: Juniper
severity: Critical
published_date: 2023-08-11
status: Open
created_at: 2026-01-30 21:37:54
updated_at: 2026-02-09 17:12:57
description:
  In PHP version 8.0.* before 8.0.30,  8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient length checking may lead to a stack buffer overflow, leading potentially to memory corruption or RCE.


cve_id: CVE-2023-25690
vendor: Cisco
severity: Critical
published_date: 2023-03-07
status: Open
created_at: 2026-01-30 21:43:28
updated_at: 2026-02-09 17:12:57
description:
  Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.




  Configurations are affected when mod_proxy is enabled along with some form of RewriteRule
   or ProxyPassMatch in which a non-specific pattern matches
   some portion of the user-supplied request-target (URL) data and is then
   re-inserted into the proxied request-target using variable 
  substitution. For example, something like:




  RewriteEngine on
  RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P]
  ProxyPassReverse /here/ http://example.com:8080/


  Request splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server.


cve_id: CVE-2023-44487
vendor: Juniper
severity: High
published_date: 2023-10-10
status: Open
created_at: 2026-01-30 22:05:53
updated_at: 2026-02-09 17:12:57
description:
  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.


cve_id: CVE-2024-38475
vendor: Harmonic
severity: Critical
published_date: 2024-07-01
status: Open
created_at: 2026-01-30 22:11:54
updated_at: 2026-02-09 17:12:57
description:
  Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map URLs to filesystem locations that are permitted to be served by the server but are not intentionally/directly reachable by any URL, resulting in code execution or source code disclosure. 

  Substitutions in server context that use a backreferences or variables as the first segment of the substitution are affected.  Some unsafe RewiteRules will be broken by this change and the rewrite flag "UnsafePrefixStat" can be used to opt back in once ensuring the substitution is appropriately constrained.


cve_id: CVE-2025-32433
vendor: Harmonic
severity: Critical
published_date: 2025-04-16
status: Open
created_at: 2026-01-30 22:13:40
updated_at: 2026-02-09 17:12:57
description:
  Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.


cve_id: CVE-2024-39894
vendor: Cisco
severity: High
published_date: 2024-07-02
status: Open
created_at: 2026-02-06 22:30:19
updated_at: 2026-02-09 17:12:57
description:
  OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur.


cve_id: CVE-2024-6387
vendor: Cisco
severity: High
published_date: 2024-07-01
status: Open
created_at: 2026-02-06 23:09:08
updated_at: 2026-02-09 17:12:57
description:
  A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.


# documents

cve_id: CVE-2018-15473
vendor: Juniper
name: Re EXTERNAL Re Juniper vulnerabilities (CVE-2018-15473).msg
type: advisory
file_size: 82.50 KB
mime_type: application/octet-stream
uploaded_at: 2026-01-28 19:21:37
file_path:
  uploads/CVE-2018-15473/Juniper/1769628097293-Re EXTERNAL Re Juniper vulnerabilities (CVE-2018-15473).msg


cve_id: CVE-2013-4786
vendor: Falcon
name: _EXTERNAL_ CVEs detected on servers dedicated for FVS.msg
type: email
file_size: 142.50 KB
mime_type: application/octet-stream
uploaded_at: 2026-01-30 17:53:01
file_path:
  uploads/CVE-2013-4786/Falcon/1769795581596-_EXTERNAL_ CVEs detected on servers dedicated for FVS.msg


cve_id: CVE-2015-7871
vendor: Juniper
name: 2015-10 Out of Cycle Security Bulletin_ NTP.org announcement of multiple vulnerabilities_.pdf
type: Bulletin
file_size: 125.11 KB
mime_type: application/pdf
uploaded_at: 2026-01-30 18:04:53
file_path:
  uploads/CVE-2015-7871/Juniper/1769796292852-2015-10 Out of Cycle Security Bulletin_ NTP.org announcement of multiple vulnerabilities_.pdf


cve_id: CVE-2015-7871
vendor: Juniper
name: 2024-05 Reference Advisory_ Junos OS and Junos OS Evolved_ Multiple CVEs reported in OpenSSH.pdf
type: advisory
file_size: 228.85 KB
mime_type: application/pdf
uploaded_at: 2026-01-30 18:05:12
file_path:
  uploads/CVE-2015-7871/Juniper/1769796312213-2024-05 Reference Advisory_ Junos OS and Junos OS Evolved_ Multiple CVEs reported in OpenSSH.pdf


cve_id: CVE-2023-3824
vendor: Juniper
name: 2024-10 Security Bulletin_ Junos OS_ J-Web_ Multiple vulnerabilities resolved in PHP software_.pdf
type: Bulletin
file_size: 115.06 KB
mime_type: application/pdf
uploaded_at: 2026-01-30 21:38:34
file_path:
  uploads/CVE-2023-3824/Juniper/1769809114084-2024-10 Security Bulletin_ Junos OS_ J-Web_ Multiple vulnerabilities resolved in PHP software_.pdf


cve_id: CVE-2023-25690
vendor: Cisco
name: CVE-2023-25690 -Cisco NX-OS Software CLI Command Injection Vulnerability.pdf
type: advisory
file_size: 164.75 KB
mime_type: application/pdf
uploaded_at: 2026-01-30 21:43:55
file_path:
  uploads/CVE-2023-25690/Cisco/1769809434901-CVE-2023-25690 -Cisco NX-OS Software CLI Command Injection Vulnerability.pdf


cve_id: CVE-2023-38408
vendor: Falcon
name: _EXTERNAL_ CVEs detected on servers dedicated for FVS.msg
type: email
file_size: 142.50 KB
mime_type: application/octet-stream
uploaded_at: 2026-01-30 21:49:21
file_path:
  uploads/CVE-2023-38408/Falcon/1769809761373-_EXTERNAL_ CVEs detected on servers dedicated for FVS.msg


cve_id: CVE-2023-38408
vendor: Juniper
name: JUNIPER EXTERNAL Re Question regarding QFXACX vulnerability to CVE-2023-38408.msg
type: email
file_size: 62.50 KB
mime_type: application/octet-stream
uploaded_at: 2026-01-30 21:51:17
file_path:
  uploads/CVE-2023-38408/Juniper/1769809877252-JUNIPER  EXTERNAL Re Question regarding QFXACX vulnerability to CVE-2023-38408.msg


cve_id: CVE-2023-44487
vendor: Juniper
name: 2024-10 Security Bulletin_ Junos OS_ Multiple vulnerabilities in OSS component nginx resolved.pdf
type: bulletin
file_size: 139.58 KB
mime_type: application/pdf
uploaded_at: 2026-01-30 22:06:26
file_path:
  uploads/CVE-2023-44487/Juniper/1769810785900-2024-10 Security Bulletin_ Junos OS_ Multiple vulnerabilities in OSS component nginx resolved.pdf


cve_id: CVE-2025-32433
vendor: Harmonic
type: advisory
file_size: 338.57 KB
mime_type: application/pdf
uploaded_at: 2026-01-30 22:14:10
name:
  Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang_OTP SSH Server_ April 2025.pdf

file_path:
  uploads/CVE-2025-32433/Harmonic/1769811250311-Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang_OTP SSH Server_ April 2025.pdf


cve_id: CVE-2025-32433
vendor: Harmonic
name: Re_ _EXTERNAL_ RE_ Request for Information AA_HARMONI-2057.msg
type: advisory
file_size: 308.00 KB
mime_type: application/octet-stream
uploaded_at: 2026-01-30 22:14:32
file_path:
  uploads/CVE-2025-32433/Harmonic/1769811272023-Re_ _EXTERNAL_ RE_ Request for Information AA_HARMONI-2057.msg


cve_id: CVE-2024-39894
vendor: Cisco
type: advisory
file_size: 338.57 KB
mime_type: application/pdf
uploaded_at: 2026-02-06 22:30:37
name:
  Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang_OTP SSH Server_ April 2025.pdf

file_path:
  uploads/CVE-2024-39894/Cisco/1770417037130-Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang_OTP SSH Server_ April 2025.pdf


cve_id: CVE-2024-6387
vendor: Cisco
type: advisory
file_size: 338.57 KB
mime_type: application/pdf
uploaded_at: 2026-02-06 23:09:30
notes: for FP Status
name:
  Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang_OTP SSH Server_ April 2025.pdf

file_path:
  uploads/CVE-2024-6387/Cisco/1770419369680-Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang_OTP SSH Server_ April 2025.pdf


cve_id: CVE-2024-6387
vendor: Juniper
type: advisory
file_size: 328.67 KB
mime_type: application/pdf
uploaded_at: 2026-02-09 15:41:16
name:
  2025-08 Updated Reference Advisory_ Junos OS and Junos OS Evolved_ Multiple CVEs reported in OpenSSH.pdf

file_path:
  uploads/CVE-2024-6387/Juniper/1770651676304-2025-08 Updated Reference Advisory_ Junos OS and Junos OS Evolved_ Multiple CVEs reported in OpenSSH.pdf


# audit_logs

username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2023-3824
ip_address: ::ffff:10.54.46.39
created_at: 2026-01-30 21:38:34
details:
  {"vendor":"Juniper","type":"Bulletin","filename":"2024-10 Security Bulletin_ Junos OS_ J-Web_ Multiple vulnerabilities resolved in PHP software_.pdf"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2023-25690
ip_address: ::ffff:10.54.46.39
created_at: 2026-01-30 21:43:55
details:
  {"vendor":"Cisco","type":"advisory","filename":"CVE-2023-25690 -Cisco NX-OS Software CLI Command Injection Vulnerability.pdf"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2023-38408
ip_address: ::ffff:10.54.46.39
created_at: 2026-01-30 21:49:21
details:
  {"vendor":"Falcon","type":"email","filename":"_EXTERNAL_ CVEs detected on servers dedicated for FVS.msg"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2023-38408
ip_address: ::ffff:10.54.46.39
created_at: 2026-01-30 21:51:17
details:
  {"vendor":"Juniper","type":"email","filename":"JUNIPER  EXTERNAL Re Question regarding QFXACX vulnerability to CVE-2023-38408.msg"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2023-44487
ip_address: ::ffff:10.54.46.39
created_at: 2026-01-30 22:06:26
details:
  {"vendor":"Juniper","type":"bulletin","filename":"2024-10 Security Bulletin_ Junos OS_ Multiple vulnerabilities in OSS component nginx resolved.pdf"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2024-38475
ip_address: ::ffff:10.54.46.39
created_at: 2026-01-30 22:12:25
details:
  {"vendor":"Harmonic","type":"advisory","filename":"Harmonic-vCMTS MISC SCAN (SECURITY-10313) PDF.pdf"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2025-32433
ip_address: ::ffff:10.54.46.39
created_at: 2026-01-30 22:14:10
details:
  {"vendor":"Harmonic","type":"advisory","filename":"Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang_OTP SSH Server_ April 2025.pdf"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2025-32433
ip_address: ::ffff:10.54.46.39
created_at: 2026-01-30 22:14:32
details:
  {"vendor":"Harmonic","type":"advisory","filename":"Re_ _EXTERNAL_ RE_ Request for Information AA_HARMONI-2057.msg"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2024-39894
ip_address: ::ffff:142.136.2.109
created_at: 2026-02-06 22:30:37
details:
  {"vendor":"Cisco","type":"advisory","filename":"Multiple Cisco Products Unauthenticated Remote Code Execution in Erlang_OTP SSH Server_ April 2025.pdf"}


username: jramos
action: document_upload
entity_type: document
entity_id: CVE-2024-6387
ip_address: ::ffff:142.136.2.109
created_at: 2026-02-09 15:41:16
details:
  {"vendor":"Juniper","type":"advisory","filename":"2025-08 Updated Reference Advisory_ Junos OS and Junos OS Evolved_ Multiple CVEs reported in OpenSSH.pdf"}


username: jramos
action: cve_nvd_sync
entity_type: cve
ip_address: ::ffff:142.136.2.109
created_at: 2026-02-09 17:12:57
details:
  {"count":17,"cve_ids":["CVE-2011-4862","CVE-2013-4786","CVE-2015-7871","CVE-2018-15473","CVE-2023-25690","CVE-2023-3824","CVE-2023-38408","CVE-2023-44487","CVE-2024-38475","CVE-2024-39894","CVE-2024-6387","CVE-2025-32433"]}


