CVE-2021-23840

< xcp2410

Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the

7.5HIGH

CVE-2021-3326

< xcp2410

The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-

7.5HIGH

CVE-2020-8285

< xcp2410

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match pa

7.5HIGH

CVE-2020-8284

< xcp2410

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and p

3.7LOW

CVE-2020-8177

< xcp2410

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwrit

7.8HIGH

CVE-2020-1968

< xcp2400

The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master sec

3.7LOW

CVE-2020-13817

< xcp2410

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system t

7.4HIGH

CVE-2019-6111

< xcp2361

An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/

5.9MEDIUM

CVE-2019-6109

< xcp2361

An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-T

6.8MEDIUM

CVE-2018-20685

< xcp2361

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or

5.3MEDIUM

CVE-2018-1000007

< xcp2361

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its

9.8CRITICAL

CVE-2016-8610

< xcp2361

A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol define

7.5HIGH

CVE-2013-2566

>= xcp and < xcp2280

The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote att

5.9MEDIUM