Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2026/10/15 6:07 p.m.•15 views

GHSA-4FJG-2H4Q-FWG3 GitHub CLI allows path traversal through unescaped request URL components

Summary A path traversal vulnerability has been identified in the GitHub CLI where some HTTP request URLs, REST API calls in particular, were built without properly escaping their variable path components. A value containing URL path metacharacters can alter the request path and cause gh to addre...

2.1CVSS5.8AI score0.00511EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/02/21 12:00 a.m.•4 views

PT-2020-7449

Name of the Vulnerable Software and Affected Versions: Unspecified web applications affected versions not specified Description: The issue allows man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP...

5.9CVSS0.06049EPSS
SaveExploits2References15
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2004/09/01 12:00 a.m.•12 views

CVE-2002-0387: Undefined Security Weakness

Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL...

7.5CVSS6.6AI score0.0317EPSS
SaveExploits0References1
Rows per page
Query Builder