Lucene search
+L

5881 matches found

Github Security Blog
Github Security Blog
added 2025/01/06 4:16 p.m.22 views

go-git has an Argument Injection via the URL field

Impact An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the onl...

9.8CVSS7AI score0.01287EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2025/01/06 4:16 p.m.13 views

GHSA-V725-9546-7Q7M go-git has an Argument Injection via the URL field

Impact An argument injection vulnerability was discovered in go-git versions prior to v5.13. Successful exploitation of this vulnerability could allow an attacker to set arbitrary values to git-upload-pack flags. This only happens when the file transport protocol is being used, as that is the onl...

9.8CVSS9AI score0.01287EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2025-2340 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.9 views

PT-2025-2360 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was rejected due to non-utilization under CNA rules, as it has not been used. Recommendations: At the moment, there is no information...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2025-2323 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2025-35305 · Unknown +1 · Mixmark-Io Turndown +1

Name of the Vulnerable Software and Affected Versions: mixmark-io turndown versions through 7.2.1 Description: A security flaw exists in mixmark-io turndown, potentially leading to inefficient regular expression complexity through manipulation of an unknown function within the...

6.9CVSS5AI score0.0048EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-2318 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.10 views

PT-2025-2334 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-2339 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.15 views

PT-2025-2332 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.10 views

PT-2025-2345 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-2357 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A CVE record was rejected due to non-compliance with CNA rules because it hasn't been used. Recommendations: At the moment, there is no information about a newer version that...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.10 views

PT-2025-2352 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns a rejected CVE record due to non-compliance with CNA rules, as it has not been used. Recommendations: At the moment, there is no information about a newer...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-2338 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.7 views

PT-2025-2359 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns a rejected CVE record due to non-compliance with CNA rules, as it was not used. Recommendations: At the moment, there is no information about a newer versi...

6.3AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2025-2337 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.7 views

PT-2026-25885

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.6 and later Description The Linux kernel includes an issue where the fchmodat2 function, introduced in version 6.6, was not included in the audit change attributes class. Calling fchmodat2 to modify file attributes in a...

5.5CVSS5.8AI score0.00124EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-2343 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.6 views

PT-2025-2341 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

6.9AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.9 views

PT-2025-2347 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A CVE record was rejected due to invalidation, as it hasn't been used, adhering to CNA compliance rules. Recommendations: At the moment, there is no information about a newer version th...

6.3AI score
SaveExploits0References3
Rows per page
Query Builder