Filtered by CWE-320
Filtered by vendor Subscriptions
Total 45 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-1316 1 Canonical 1 Juju 2024-11-21 N/A
Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.
CVE-2015-0936 1 Ceragon 4 Fibeair Ip-10 Firmware, Fibeair Ip-10c, Fibeair Ip-10e and 1 more 2024-11-21 9.8 Critical
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
CVE-2015-0839 1 Hp 1 Linux Imaging And Printing 2024-11-21 N/A
The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.
CVE-2015-0153 1 Dlink 2 Dir-815, Dir-815 Firmware 2024-11-21 N/A
D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.
CVE-2013-2233 1 Redhat 1 Ansible 2024-11-21 N/A
Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.