Lucene search
+L

851 matches found

BDU FSTEC
BDU FSTEC
•added 2020/04/22 12:00 a.m.•18 views

Git Recursive Cloning Unauthorized Access

The vulnerability of the recursive cloning component of the distributed version control system Git is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and...

9.3CVSS7.9AI score0.34007EPSS
SaveExploits0References11Affected Software5
RedHat Linux
RedHat Linux
•added 2020/04/21 5:51 p.m.•15 views

git: Crafted URL containing new lines can cause credential leak

A flaw was found in git. Credentials can be leaked through the use of a crafted URL that contains a newline, fooling the credential helper to give information for a different host. Highest threat from the vulnerability is to data confidentiality...

9.3CVSS7AI score0.09966EPSS
SaveExploits2References6
NVD
NVD
•added 2020/03/18 10:15 p.m.•25 views

CVE-2020-9423

LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. Those documents could then be used for multiple tasks, such as version control, shared among users,...

10CVSS8.1AI score0.05007EPSS
SaveExploits1References1
Prion
Prion
•added 2020/03/18 10:15 p.m.•27 views

Design/Logic Flaw

LogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command execution or retrieval of data from the database. LogicalDoc provides a functionality to add documents. Those documents could then be used for multiple tasks, such as version control, shared among users,...

10CVSS8.4AI score0.05007EPSS
SaveExploits1References1Affected Software1
Snyk
Snyk
•added 2020/03/09 2:54 p.m.•15 views

Command Injection

Overview blamer is a tool for get information about author of code from version control system. Supports git and subversion. Affected versions of this package are vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to blamer. PoC var Root...

9.8CVSS7.2AI score0.0242EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/03/06 5:20 p.m.•44 views

CVE-2020-8113

GitLab 10.7 and later through 12.7.2 has Incorrect Access Control...

9.5AI score0.01383EPSS
SaveExploits0References3
Gitee
Gitee
•added 2020/02/18 9:25 p.m.•10 views

AFLplusplus

This is a code repository for AFLplusplus, a tool for fuzz testing and vulnerability discovery. The repository contains various files and directories related to the project, including configuration files, makefiles, and documentation. The repository is organized as follows: .clang-format is a...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2019/12/19 7:18 p.m.•49 views

git: Recursive submodule cloning allows using git directory twice with synonymous directory name written in .git/

An improper input validation flaw was discovered in git in the way it handles git submodules. A remote attacker could abuse this flaw to trick a victim user into recursively cloning a malicious repository, which, under certain circumstances, could fool git into using the same git directory twice...

9.3CVSS8AI score0.34007EPSS
SaveExploits0References5
Gitee
Gitee
•added 2019/10/19 9:04 a.m.•17 views

metasploit-framework

This is an exploit module for the Metasploit Framework, a penetration testing tool. The module is designed to target a vulnerability in a specific product or service, but the exact target is not specified in the provided context. The module is likely intended to be used by penetration testers and...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2019/08/30 12:00 a.m.•46 views

Debian DLA-1903-1 : subversion security update

Several vulnerabilities were discovered in Subversion, a version control system. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2018-11782 Ace Olszowka reported that the Subversion's svnserve server process may exit when a well-formed read-only request...

7.5CVSS7AI score0.0344EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2019/08/20 12:00 a.m.•18 views

svnserve DoS

The vulnerability of the server process svnserve in a centralized version control system like Subversion is related to the handling of the null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service interruptions...

7.8CVSS7.2AI score0.0344EPSS
SaveExploits0References7Affected Software4
AlmaLinux
AlmaLinux
•added 2019/08/15 5:34 p.m.•43 views

Important: subversion:1.10 security update

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Security Fixes: subversion: NULL pointer dereference in svnserve leading to an...

7.5CVSS1.1AI score0.0344EPSS
SaveExploits0References2
osv-alsa
osv-alsa
•added 2019/08/15 5:34 p.m.•35 views

ALSA-2019:2512 Important: subversion:1.10 security update

Subversion SVN is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Security Fixes: subversion: NULL pointer dereference in svnserve leading to an...

7.5CVSS7.7AI score0.0344EPSS
SaveExploits0References2
Fedora
Fedora
•added 2019/08/06 1:19 a.m.•40 views

[SECURITY] Fedora 30 Update: subversion-1.12.2-1.fc30

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

7.5CVSS2.5AI score0.0344EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2019/08/06 12:00 a.m.•49 views

Fedora Update for subversion FEDORA-2019-f6bc68e455

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.4AI score
SaveExploits0References2
OSV
OSV
•added 2019/07/02 5:15 p.m.•14 views

CVE-2019-7263

Linear eMerge E3-Series devices have a Version Control Failure...

9.8CVSS7.3AI score0.01795EPSS
SaveExploits0References2
NVD
NVD
•added 2019/07/02 5:15 p.m.•25 views

CVE-2019-7263

Linear eMerge E3-Series devices have a Version Control Failure...

10CVSS9.5AI score0.01795EPSS
SaveExploits0References2
Prion
Prion
•added 2019/07/02 5:15 p.m.•27 views

Design/Logic Flaw

Linear eMerge E3-Series devices have a Version Control Failure...

10CVSS9.4AI score0.01795EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2019/07/02 5:00 p.m.•125 views

CVE-2019-7263

CVE-2019-7263 affects Linear eMerge E3-Series devices and is described as a Version Control Failure. Connected sources corroborate the affected product and nature of the issue. The NVD entry assigns a high/critical impact profile (CVSSv3: 9.8) with network attack vector, no authentication/privile...

10CVSS9.4AI score0.01795EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/07/02 5:00 p.m.•39 views

CVE-2019-7263

Linear eMerge E3-Series devices have a Version Control Failure...

9.5AI score0.01795EPSS
SaveExploits0References2
Rows per page
Query Builder