Fedora 36 : fish (2022-443c5ec2dd)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-443c5ec2dd advisory. Update to 3.4.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

MGASA-2022-0181 Updated fish packages fix security vulnerability

Arbitrary Code Execution. CVE-2022-20001...

Fedora: Security Advisory for fish (FEDORA-2022-443c5ec2dd)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2022:0096-1 Security update for fish3

This update for fish3 fixes the following issues: - CVE-2022-20001: Navigating to a compromised git repository may lead to arbitrary code execution bsc1197139...

CVE-2022-20001

creationtimestamp| type| source ---|---|--- 2022-03-14 21:18:25+00:00| seen| https://t.me/cibsecurity/38904 2022-10-13 07:27:25+00:00| seen| https://t.me/cibsecurity/51304 2025-05-15 16:35:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16527...

CVE-2022-20001 Injection in fish

fish is a command line shell. fish version 3.1.0 through version 3.3.1 is vulnerable to arbitrary code execution. git repositories can contain per-repository configuration that change the behavior of git, including running arbitrary commands. When using the default configuration of fish, changing...

CVE-2022-20001

CVE-2022-20001 affects fish shell 3.1.0–3.3.1 where changing directories can trigger arbitrary commands via git in per-repository configurations, affecting prompts and git integration when using default config. Root cause is per-repo configuration execution invoked during directory changes (promp...

Debian DLA-2918-1 : debian-edu-config - LTS security update

The remote Debian 9 host has a package installed that is affected by a vulnerability as referenced in the dla-2918 advisory. Marcel Neumann, Robert Altschaffel, Loris Guba and Dustin Hermann discovered that debian-edu-config, a set of configuration files used for the Debian Edu blend configured...

CVE-2021-20001

creationtimestamp| type| source ---|---|--- 2022-02-11 22:28:52+00:00| seen| https://t.me/cibsecurity/37350...

[SECURITY] [DLA 2918-1] debian-edu-config security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2918-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta February 12, 2022 https://wiki.debian.org/LTS -...

CVE-2021-20001

It was discovered, that debian-edu-config, a set of configuration files used for the Debian Edu blend, before 2.12.16 configured insecure permissions for the user web shares /publichtml, which could result in privilege escalation...

CVE-2021-20001

CVE-2021-20001 affects debian-edu-config prior to 2.12.16, where insecure permissions on user web shares (~/public_html) could allow privilege escalation. Debian advisories (DSA-5072-1, DLA-2918-1) document the issue and its fix; for Debian 9, the fix is in 1.929+deb9u5. Multiple feeds (NVD entry...

[SECURITY] [DSA 5072-1] debian-edu-config security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5072-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff February 11, 2022 https://www.debian.org/security/faq -...

CVE-2007-20001

The CVE-2007-20001 entry concerns StarWind iSCSI SAN/target where an attacker can script standard iSCSI Initiator operations to exhaust the StarWind service socket, causing denial of service. Affected: StarWind iSCSI SAN Windows Native, Version 3.2.2 build 2007-02-20. In connected PT-2022-7718 de...

CVE-2012-20001

creationtimestamp| type| source ---|---|--- 2021-12-21 18:23:25+00:00| seen| https://t.me/cibsecurity/34435...

CVE-2012-20001

CVE-2012-20001 affects PrestaShop prior to 1.5.2.0. The vulnerability is an XSS in which an attacker can inject HTML/JS via the string "<object data='data:text/html" contained in the message field. The root cause is insufficient sanitization of the message content, enabling script execution in...

Diffie-Hellman Ephemeral Key Exchange DoS Vulnerability (SSH, D(HE)ater)

The remote SSH server is supporting Diffie-Hellman ephemeral DHE Key Exchange KEX algorithms and thus could be prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Diffie-Hellman Ephemeral Key Exchange DoS Vulnerability (SSL/TLS, D(HE)ater)

The remote SSL/TLS server is supporting Diffie-Hellman ephemeral DHE Key Exchange algorithms and thus could be prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

CVE-2002-20001

creationtimestamp| type| source ---|---|--- 2021-11-11 22:37:55+00:00| seen| https://t.me/cibsecurity/32258 2021-12-19 13:30:32+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5006 2025-07-28 15:00:06+00:00| published-proof-of-concept|...

CVE-2015-20001

In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside siftup or siftdownrange panics. This bug leads to a drop of zeroed memory as an arbitrary type, which can result in a memory...