Lucene search
+L

135 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 9:23 p.m.9 views

CVE-2021-29468

Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted repository that contains symbolic links as well as files with backslash characters in the file name may cause just-checked out code to be executed while checking out a repository using Git on...

9.3CVSS7AI score0.22427EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/11/05 10:01 p.m.18 views

CVE-2024-47611

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

5.3CVSS7.3AI score0.00756EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2024/10/03 2:49 a.m.7 views

SUSE CVE-2024-47611

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

6.3CVSS7.7AI score0.00756EPSS
SaveExploits0References3
CVE
CVE
added 2024/10/02 2:16 p.m.57 views

CVE-2024-47611

CVE-2024-47611 affects XZ Utils on Windows platforms built with MinGW-w64 or MSVC for the command-line tools in versions 5.6.2 and earlier. The underlying issue is command-line argument handling where Unicode characters that do not exist in the legacy code page are converted to similar-looking ch...

6.3CVSS7AI score0.00756EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2024/10/02 2:16 p.m.18 views

CVE-2024-47611

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

6.3CVSS7.8AI score0.00756EPSS
SaveExploits0References2
OSV
OSV
added 2024/10/02 2:16 p.m.15 views

CVE-2024-47611 XZ Utils on Microsoft Windows platform are vulnerable to argument injection

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

6.3CVSS6AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2024/10/02 2:16 p.m.20 views

CVE-2024-47611

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

6.3CVSS5.8AI score0.00756EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/10/02 2:16 p.m.23 views

CVE-2024-47611 XZ Utils on Microsoft Windows platform are vulnerable to argument injection

XZ Utils provide a general-purpose data-compression library plus command-line tools. When built for native Windows MinGW-w64 or MSVC, the command line tools from XZ Utils 5.6.2 and older have a command line argument injection vulnerability. If a command line contains Unicode characters for exampl...

6.3CVSS7.4AI score0.00756EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/26 12:00 a.m.8 views

Mintty Security Vulnerabilities

mintty is an application software Cygwin terminal emulator that can also be used with MSYS and Msys2. A security vulnerability exists in Mintty v.3.6.4 and earlier versions that could allow a remote attacker to execute arbitrary code via a terminal via a crafted command...

9.8CVSS7.6AI score0.01033EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/16 12:00 a.m.8 views

Mintty 注入漏洞

mintty is an application software Cygwin terminal emulator, also available for MSYS and Msys2. A security vulnerability exists in Mintty versions prior to 3.6.3. An attacker can exploit this vulnerability to execute code...

9.8CVSS8.4AI score0.01113EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2022/04/21 12:00 a.m.51 views

EulerOS 2.0 SP10 : git (EulerOS-SA-2022-1520)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted repository that contains symbolic links as...

9.3CVSS8AI score0.22427EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/04/20 12:00 a.m.46 views

EulerOS 2.0 SP10 : git (EulerOS-SA-2022-1519)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted repository that contains symbolic links as...

9.3CVSS8AI score0.22427EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/20 12:00 a.m.22 views

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-1520)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.3AI score0.0124EPSS
SaveExploits0References2
Veracode
Veracode
added 2021/07/05 5:37 a.m.14 views

Denial Of Service (DoS)

cygwin is vulnerable to denial of service. A buffer overflow in the wcsxfrm/wcsxfrml function allows an attacker to crash the process or hijack processes running with administrative privileges, through the submission of a malicious string...

7.5CVSS4.5AI score0.02746EPSS
SaveExploits1References2Affected Software1
Veracode
Veracode
added 2021/07/05 5:31 a.m.17 views

Privilege Escalation

cygwin is vulnerable to privilege escalation. Insecure handling of permissions modification when changing users allow an attacker to obtain additional privileges...

9.8CVSS5AI score0.0204EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2021/06/07 11:04 a.m.5 views

OESA-2021-1210 git security update

Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Git is easy to learn and has a tiny footprint with lightning fast performance. It outclasses SCM tools like Subversion, CVS, Perforce, and...

8.8CVSS7.1AI score0.0124EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/06/06 12:00 a.m.10 views

Mintty 安全漏洞

mintty is an application software Cygwin terminal emulator, also available for MSYS and Msys2. A security vulnerability exists in Mintty prior to 3.4.7, which stems from incorrect handling of bracketed paste patterns...

7.5CVSS7.3AI score0.00912EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/06/04 12:00 a.m.39 views

Mintty Denial of Service Vulnerability

Mintty is an application software Cygwin terminal emulator, also available for MSYS and Msys2. Mintty has a security vulnerability that can be exploited by an attacker to cause a denial of service Windows GUI hang by telling the Mintty window to repeatedly change its title at high speed, which...

7.5CVSS2.3AI score0.01637EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/29 9:15 p.m.50 views

CVE-2021-29468

Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted repository that contains symbolic links as well as files with backslash characters in the file name may cause just-checked out code to be executed while checking out a repository using Git on...

8.8CVSS0.0124EPSS
SaveExploits0References4
OSV
OSV
added 2021/04/29 9:15 p.m.36 views

CVE-2021-29468

Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted repository that contains symbolic links as well as files with backslash characters in the file name may cause just-checked out code to be executed while checking out a repository using Git on...

8.8CVSS6.8AI score
SaveExploits0References4
Rows per page
Query Builder