13487 matches found
ggit is vulnerable to Arbitrary Argument Injection via the clone() API
All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...
CVE-2024-21533
All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...
CVE-2024-21533
All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...
CVE-2024-21533
GGIT is affected across all versions by Arbitrary Argument Injection via the clone() API. The root cause is failure to sanitize user input and validate URL schemes, plus improper handling of git command-line flags (using -- to end options). Public details include a PoC from Snyk and a GitHub gist...
CVE-2024-21533
All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...
Microsoft Azure Command Line Integration 命令注入漏洞
Microsoft Azure Command Line Integration CLI is a cross-platform command line tool from Microsoft USA that connects to Azure and executes management commands on Azure resources. Microsoft Azure Command Line Integration CLI suffers from an elevation of privilege vulnerability that is caused by a...
PT-2024-31739
Name of the Vulnerable Software and Affected Versions: Apache Subversion versions up to and including 1.14.3 Description: On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables may lead to unexpected command line argument...
PT-2024-9556 · Microsoft +1 · Azure Cli +1
Name of the Vulnerable Software and Affected Versions: Azure Command Line Integration CLI affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Command Line Integration CLI. It is associated with a failure to properly clean up da...
KLA73907 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure Monitor Agent can be exploited remotely to gain...
BIT-JENKINS-2024-47803
Jenkins LTS 2.462.2 and earlier does not redact multi-line secret values in error messages generated for form submissions involving the secretTextarea form field...
CVE-2024-0125
A flaw was found in the NVIDIA CUDA toolkit. A user can cause a NULL pointer dereference via the nvdisam command line tool by running nvdisasm on a malformed ELF file, leading to a limited denial of service...
CVE-2024-0125
NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...
CVE-2024-0123
NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking the user into running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial ...
CVE-2024-0125
CVE-2024-0125 affects NVIDIA CUDA Toolkit (Windows and Linux) due to a NULL pointer dereference in the nvdisasm command when invoked on a malformed ELF file. The vulnerability could allow a limited denial of service. The issue is rooted in the nvdisasm tool within the CUDA toolkit; connected docu...
CVE-2024-0125
NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...
CVE-2024-0125
NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...
CVE-2024-0125
NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...
CVE-2024-0124
CVE-2024-0124 affects the NVIDIA CUDA Toolkit (Windows and Linux) specifically the nvdisasm command. The flaw allows a user to cause nvdisasm to read freed memory when processing a malformed ELF file, which can lead to a limited denial of service. The available sources describe the root cause as ...
CVE-2024-0124
NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service...
CVE-2024-0123
NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking the user into running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial ...