Lucene search
+L

122 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 4:20 a.m.•12 views

SUSE CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

6.5CVSS9.4AI score0.02617EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/11/15 12:00 a.m.•19 views

Micrium uC-HTTP buffer error vulnerability

Micrium uC-HTTP is a software from Micrium USA that provides TCP/IP functionality for devices. The software is designed for embedded applications with a compact, reliable, high-performance TCP/IP stack with dual support for IPv4 and IPv6. A security vulnerability exists in Micrium uC-HTTP version...

9.8CVSS9.4AI score0.02444EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2022/05/30 7:53 a.m.•14 views

rsyslog: Heap-based overflow in TCP syslog server

A flaw was found in rsyslog's reception TCP modules. This flaw allows an attacker to craft a malicious message leading to a heap-based buffer overflow. This issue allows the attacker to corrupt or access data stored in memory, leading to a denial of service in the rsyslog or possible remote code...

8.1CVSS8AI score0.03949EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2022/05/13 1:24 a.m.•35 views

Mercurial Incorrect Access Control vulnerability

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

9.1CVSS7.2AI score0.02617EPSS
SaveExploits0References8Affected Software1
attackerkb
attackerkb
•added 2022/04/12 8:15 p.m.•26 views

CVE-2022-29051

Missing permission checks in Jenkins Publish Over FTP Plugin 1.16 and earlier allow attackers with Overall/Read permission to connect to an FTP server using attacker-specified credentials...

4.3CVSS5.9AI score0.00749EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/11/11 12:00 a.m.•63 views

Microsoft Windows Multiple Vulnerabilities (KB4586830)

This host is missing a critical security update according to Microsoft KB4586830 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.9AI score0.27101EPSS
SaveExploits2References3
CNVD
CNVD
•added 2020/02/11 12:00 a.m.•12 views

Squid Information Disclosure Vulnerability (CNVD-2020-05099)

Squid is a caching and forwarding HTTP web proxy. An information disclosure vulnerability exists in versions prior to Squid 4.10. An attacker can exploit this vulnerability to obtain sensitive information from heap memory via a specially crafted FTP server...

7.5CVSS8.1AI score0.10493EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2018-1178)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS8.5AI score0.02617EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for mercurial (EulerOS-SA-2018-1112)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.1CVSS8.5AI score0.02617EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/12/31 12:00 a.m.•40 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : mercurial Multiple Vulnerabilities (NS-SA-2019-0234)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has mercurial packages installed that are affected by multiple vulnerabilities: - Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized da...

9.8CVSS7.3AI score0.02665EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2019/12/02 12:00 a.m.•44 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : mercurial Multiple Vulnerabilities (NS-SA-2019-0216)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has mercurial packages installed that are affected by multiple vulnerabilities: - Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized da...

9.8CVSS7.3AI score0.02665EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2019/08/14 8:55 p.m.•59 views

CVE-2019-1225 Remote Desktop Protocol Server Information Disclosure Vulnerability

...

7.5CVSS8.5AI score0.10522EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/14 8:55 p.m.•192 views

CVE-2019-1225

A vulnerability exists in the Windows RDP server due to errors in memory object handling , where the server improperly discloses contents of its memory. An attacker capable of connecting remotely to an affected system can run a specially crafted application to disclose sensitive information, whic...

7.5CVSS7.8AI score0.10522EPSS
SaveIn wildExploits0References1Affected Software3
OpenVAS
OpenVAS
•added 2018/07/09 12:00 a.m.•37 views

Debian: Security Advisory (DLA-1414-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.8AI score0.21685EPSS
SaveExploits1References3
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/18 12:08 a.m.•46 views

Security Bulletin: Samba vulnerability issue on IBM SONAS (CVE-2014-0178)

Summary A fix is available for IBM SONAS, for the security issue that an attacker could obtain sensitive information by exploiting a vulnerability in Samba protocol server Vulnerability Details CVEID: CVE-2014-0178 DESCRIPTION: Samba protocol server is used in IBM SONAS to enable file management...

3.5CVSS6.8AI score0.04468EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2018/05/29 12:00 a.m.•49 views

EulerOS 2.0 SP1 : mercurial (EulerOS-SA-2018-1142)

According to the versions of the mercurial package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. - Securi...

9.1CVSS7.3AI score0.02617EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/04/02 12:00 a.m.•43 views

Debian DLA-1331-1 : mercurial security update

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1. This update also fixes...

9.1CVSS7.3AI score0.02617EPSS
SaveExploits0References3
Debian
Debian
•added 2018/03/30 3:34 p.m.•47 views

[SECURITY] [DLA 1331-1] mercurial security update

Package : mercurial Version : 2.2.2-4+deb7u7 CVE ID : CVE-2018-1000132 Debian Bug : 892964 Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network...

9.1CVSS6.9AI score0.02617EPSS
SaveExploits0
CNVD
CNVD
•added 2018/03/19 12:00 a.m.•11 views

Mercurial Protocol Server Access Control Error Vulnerability

Mercurial is a software developer Matt Mackall developed a set of cross-platform distributed version control software written in Python. The software supports simultaneous processing of plain text and binary files , etc. Protocol server is one of the protocol server . An access control error...

9.1CVSS9.4AI score0.02617EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2018/03/14 1:29 p.m.•35 views

CVE-2018-1000132

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

9.1CVSS9.4AI score
SaveExploits0References5
Rows per page
Query Builder