EulerOS Virtualization 3.0.6.6 : git (EulerOS-SA-2022-2500)

According to the versions of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machine...

Get-BrokerController : Insufficient administrative privilege when ran via Remote POSH SDK

Issue using Get-BrokerController command when using remote POSH SDK with Citrix Cloud. Error : Insufficient administrative privilege...

EulerOS 2.0 SP10 : git (EulerOS-SA-2022-2156)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...

Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-2156)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : git (ALAS-2022-1810)

The version of git installed on the remote host is prior to 2.34.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1810 advisory. A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system...

EulerOS 2.0 SP9 : git (EulerOS-SA-2022-1965)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...

EulerOS 2.0 SP5 : git (EulerOS-SA-2022-1888)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...

Amazon Linux AMI : git (ALAS-2022-1589)

The version of git installed on the remote host is prior to 2.36.1-1.75. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1589 advisory. A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system...

SUSE SLES15: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2022:1260-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1260-1 advisory. - CVE-2022-24765: Fixed a potential command injection via git worktree bsc1198234. Tenable has extracted the preceding description block...

CVE-2022-24765

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...

CVE-2022-24765

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...

CVE-2022-24765 Uncontrolled search for the Git directory in Git for Windows

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...

Ubuntu 18.04 LTS / 20.04 LTS : Git vulnerability (USN-5376-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5376-1 advisory. discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use this issue t...

posh-faith.co.jp Cross Site Scripting vulnerability OBB-1412675

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2014-2214

Multiple cross-site scripting XSS vulnerabilities in POSH aka Posh portal or Portaneo 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 error parameter to /includes/plugins/mobile/scripts/login.php or 2 id parameter to portal/openrssarticle.php...

CVE-2014-2213

Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to portal/scrsendmd5.php...

Open redirect

Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter to portal/scrsendmd5.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in POSH aka Posh portal or Portaneo 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 error parameter to /includes/plugins/mobile/scripts/login.php or 2 id parameter to portal/openrssarticle.php...

CVE-2014-2214

POSH (Posh portal / Portaneo) 3.0–3.2.1 suffers XSS vulnerabilities that allow remote attackers to inject arbitrary scripts/HTML via the login.php error parameter or portal/openrssarticle.php id parameter. Affected versions, entry CVE-2014-2214, are described in NVD with CVSS metrics (2.0: 4.3, M...

CVE-2014-2214

Multiple cross-site scripting XSS vulnerabilities in POSH aka Posh portal or Portaneo 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 error parameter to /includes/plugins/mobile/scripts/login.php or 2 id parameter to portal/openrssarticle.php...