Debian: Security Advisory (DLA-2538-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary Code Execution

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

git-big-picture code injection vulnerability

Git Big Ppicture is the Git Big Ppicture team of a Python based can be Git commit records for visual display of the software . A code injection vulnerability exists prior to version 1.0.0 of git-big-picture, which can be exploited to execute code because the program incorrectly handles characters...

CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

DEBIAN-CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

Remote code execution

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

PYSEC-2021-15

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

UBUNTU-CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

PYSEC-2021-15

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

CVE-2021-3028

git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution...

Git Big Ppicture 输入验证错误漏洞

Git Big Ppicture is the Git Big Ppicture team of a Python based can be Git commit records for visual display of the software . A code injection vulnerability exists prior to version 1.0.0 of git-big-picture, which can be exploited to execute code because the program incorrectly handles characters...

Multi Branch School Management System 3.5 Cross Site Scripting

Exploit Title: Multi Branch School Management System 3.5 - "Create Branch" Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-21 Google Dork: N/A Vendor Homepage: https://www.ramomcoder.com/ Software Link: https://codecanyon.net/item/ramom-multi-branch-school-management-system/25182324 Affecte...

Multi Branch School Management System 3.5 - _Create Branch_ Stored XSS

Exploit Title: Multi Branch School Management System 3.5 - "Create Branch" Stored XSS Exploit Author: Kislay Kumar Date: 2020-12-21 Google Dork: N/A Vendor Homepage: https://www.ramomcoder.com/ Software Link: https://codecanyon.net/item/ramom-multi-branch-school-management-system/25182324 Affecte...

Security update for gcc7 (moderate)

openSUSE Security Update: Security update for gcc7 Announcement ID: openSUSE-SU-2020:2300-1 Rating: moderate References: 1150164 1161913 1167939 1172798 1178577 1178614 1178624 1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability a...

PYSEC-2020-141

In TensorFlow release candidate versions 2.4.0rc, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the parallel...

PYSEC-2020-335

In TensorFlow release candidate versions 2.4.0rc, the general implementation for matching filesystem paths to globbing pattern is vulnerable to an access out of bounds of the array holding the directories. There are multiple invariants and preconditions that are assumed by the parallel...

CVE-2020-8919

An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST API allows an attacker with only the default set of priviledges to read all other user's personal account data as well as sub-trees with...

Information disclosure

An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST API allows an attacker with only the default set of priviledges to read all other user's personal account data as well as sub-trees with...