Lucene search
K

726 matches found

Tenable Nessus
Tenable Nessus
added 2017/08/22 12:0 a.m.42 views

Scientific Linux Security Update : mercurial on SL7.x x86_64 (20170817)

Security Fixes : - A vulnerability was found in the way Mercurial handles path auditing and caches the results. An attacker could abuse a repository with a series of commits mixing symlinks and regular files/directories to trick Mercurial into writing outside of a given repository. CVE-2017-10001...

10CVSS7.1AI score0.04585EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2017/08/18 12:0 a.m.38 views

Scientific Linux Security Update : git on SL6.x i386/x86_64 (20170817)

Security Fixes : - A shell command injection flaw related to the handling of 'ssh' URLs has been discovered in Git. An attacker could use this flaw to execute shell commands with the privileges of the user running the Git client, for example, when performing a 'clone' action on a malicious...

8.8CVSS6.8AI score0.70245EPSS
Exploits9References2
OpenVAS
OpenVAS
added 2017/08/18 12:0 a.m.29 views

CentOS Update for emacs-git CESA-2017:2485 centos6

Check the version of emacs-git SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882761";...

8.8CVSS7.1AI score0.70245EPSS
Exploits9References2
Tenable Nessus
Tenable Nessus
added 2017/08/18 12:0 a.m.25 views

RHEL 7 : mercurial (RHSA-2017:2489)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2489 advisory. Mercurial is a fast, lightweight source control management system designed for efficient handling of very large distributed projects. Securi...

10CVSS7.2AI score0.04585EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2017/08/18 12:0 a.m.32 views

Oracle Linux 6 : git (ELSA-2017-2485)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2485 advisory. 1.7.1-9 - prevent command injection via malicious ssh URLs Resolves: CVE-2017-1000117 Tenable has extracted the preceding description block directly from the...

8.8CVSS6.8AI score0.70245EPSS
Exploits9References2
RedHat Linux
RedHat Linux
added 2017/08/17 9:56 p.m.115 views

Important: Red Hat Security Advisory: rh-git29-git security update

An update for rh-git29-git is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

8.8CVSS6.8AI score0.71499EPSS
Exploits11References3
RedHat Linux
RedHat Linux
added 2017/08/17 11:6 a.m.91 views

Important: Red Hat Security Advisory: mercurial security update

An update for mercurial is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

10CVSS6.7AI score0.04585EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2017/08/17 11:6 a.m.2 views

mercurial: command injection on clients through malicious ssh URLs

A shell command injection flaw related to the handling of "ssh" URLs has been discovered in Mercurial. This can be exploited to execute shell commands with the privileges of the user running the Mercurial client, for example, when performing a "checkout" or "update" action on a sub-repository...

10CVSS7.4AI score0.04585EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2017/08/17 12:0 a.m.24 views

RHEL 7 : git (RHSA-2017:2484)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2484 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...

8.8CVSS7AI score0.70245EPSS
Exploits9References4
OpenVAS
OpenVAS
added 2017/08/17 12:0 a.m.33 views

RedHat Update for git RHSA-2017:2485-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.5AI score0.70245EPSS
Exploits9References2
OpenVAS
OpenVAS
added 2017/08/17 12:0 a.m.35 views

RedHat Update for git RHSA-2017:2484-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.5AI score0.70245EPSS
Exploits9References2
Tenable Nessus
Tenable Nessus
added 2017/08/17 12:0 a.m.50 views

RHEL 6 : git (RHSA-2017:2485)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2485 advisory. Git is a distributed revision control system with a decentralized architecture. As opposed to centralized version control systems with a client-serve...

8.8CVSS7AI score0.70245EPSS
Exploits9References4
RedHat Linux
RedHat Linux
added 2017/08/16 11:26 p.m.105 views

Important: Red Hat Security Advisory: git security update

An update for git is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

8.8CVSS6.8AI score0.70245EPSS
Exploits9References2
Tenable Nessus
Tenable Nessus
added 2017/08/16 12:0 a.m.43 views

Oracle Linux 7 : subversion (ELSA-2017-2480)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2017-2480 advisory. 1.7.14-11 - add security fix for CVE-2017-9800 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

9.8CVSS7.1AI score0.67275EPSS
Exploits3References2
OpenVAS
OpenVAS
added 2017/08/16 12:0 a.m.33 views

RedHat Update for subversion RHSA-2017:2480-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.67275EPSS
Exploits3References2
RedHat Linux
RedHat Linux
added 2017/08/15 8:20 p.m.128 views

Important: Red Hat Security Advisory: subversion security update

An update for subversion is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

9.8CVSS6.8AI score0.67275EPSS
Exploits3References2
RedhatCVE
RedhatCVE
added 2017/08/10 7:18 p.m.42 views

CVE-2017-1000116

A shell command injection flaw related to the handling of "ssh" URLs has been discovered in Mercurial. This can be exploited to execute shell commands with the privileges of the user running the Mercurial client, for example, when performing a "checkout" or "update" action on a sub-repository...

10CVSS2.5AI score0.04585EPSS
Exploits1References2
NVD
NVD
added 2017/07/25 3:29 p.m.10 views

CVE-2017-11566

AppUse 4.0 allows shell command injection via a proxy field...

7.8CVSS7.9AI score0.00599EPSS
Exploits0References1
Prion
Prion
added 2017/07/25 3:29 p.m.6 views

Command injection

AppUse 4.0 allows shell command injection via a proxy field...

7.2CVSS7.9AI score0.00599EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2017/07/25 3:29 p.m.1 views

CVE-2017-11566

AppUse 4.0 allows shell command injection via a proxy field...

7.8CVSS5.8AI score0.00599EPSS
Exploits0References1
Rows per page
Query Builder