484 matches found
UBUNTU-CVE-2024-35241
Composer is a dependency manager for PHP. On the 2.x branch prior to versions 2.2.24 and 2.7.7, the status, reinstall and remove commands with packages installed from source via git containing specially crafted branch names in the repository can be used to execute code. Patches for this issue are...
Kyber Security Breach
Kyber is a repository open-sourced by pq-crystals. A security vulnerability exists in Kyber versions prior to 9b8d306, which stems from the fact that polyfrommsg in poly.c does not prevent Clang from issuing vulnerable key dependency branches...
PT-2024-27807 · Kyber · Kyber
Name of the Vulnerable Software and Affected Versions: Kyber reference implementation versions prior to 9b8d306 Description: The issue is related to a timing side channel that allows attackers to recover an ML-KEM 512 secret key in minutes. This occurs because the poly frommsg function in poly.c...
GitLab 13.9 < 13.11.6 / 13.12 < 13.12.6 / 14.0 < 14.0.2 (CVE-2021-22226)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Under certain conditions, some users were able to push to protected branches that were restricted to deploy keys in GitLab CE/EE since version 13.9 CVE-2021-22226 Note that Nessus has not tested for...
UBUNTU-CVE-2024-4539
An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2 where abusing the API to filter branch and tags could lead to Denial of Service...
GitLab 16.4.3 < 16.4.4 / 16.5.3 < 16.5.4 / 16.6.1 < 16.6.2 (CVE-2023-6564)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab EE Premium and Ultimate affecting versions 16.4.3, 16.5.3, and 16.6.1. In projects using subgroups to define who can push and/or merge to protected branches, the...
HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches
...
hw: cpu: AMD CPUs may transiently execute beyond unconditional direct branch
A flaw was found in hw. This issue can cause AMD CPUs to transiently execute beyond unconditional direct branches...
GHSA-Q64H-39HV-4CF7 HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches
When go-getter is performing a Git operation, go-getter will try to clone the given repository. If a Git reference is not passed along with the Git url, go-getter will then try to check the remote repository’s HEAD reference of its default branch by passing arguments to the Git binary on the host...
CVE-2024-3817
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package...
DEBIAN-CVE-2024-3817
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package...
CVE-2024-3817
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package...
UBUNTU-CVE-2024-3817
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package...
CVE-2024-3817 HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches
HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability does not affect the go-getter/v2 branch and package...
HashiCorp go-getter Vulnerable to Argument Injection When Fetching Remote Default Git Branches
Summary HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. This vulnerability, CVE-2024-3817, is fixed in go-getter 1.7.4. This vulnerability does not affect the go-getter/v2 branch and package. Background HashiCorp’s go-getter is a...
CVE-2024-26902 perf: RISCV: Fix panic on pmu overflow handler
In the Linux kernel, the following vulnerability has been resolved: perf: RISCV: Fix panic on pmu overflow handler 1 idx of int is not desired when setting bits in unsigned long overflowedctrs, use BIT instead. This panic happens when running 'perf record -e branches' on sophgo sg2042. 273.311852...
PT-2024-5223 · Go-Getter +2 · Go-Getter +2
Name of the Vulnerable Software and Affected Versions: go-getter versions prior to 1.7.4 go-getter/v2 branch and package are not affected Description: The go-getter library is vulnerable to argument injection when executing Git to discover remote branches. An attacker may format a Git URL in orde...
CVE-2024-3415
A vulnerability was found in SourceCodester Human Resource Information System 1.0. It has been classified as problematic. Affected is an unknown function of the file SuperadminDashboard/process/addbranchesprocess.php. The manipulation of the argument branchesname leads to cross site scripting. It...
Human Resource Information System 跨站脚本漏洞
Human Resource Information System is a human resource information system. A cross-site scripting vulnerability exists in SourceCodester Human Resource Information System version 1.0, which originates from a cross-site scripting vulnerability in the branches name parameter of the...
PT-2024-25721 · Sourcecodester · Sourcecodester Human Resource Information System
Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Information System version 1.0 Description: A problematic issue has been found in the software, affecting an unknown function of the file Superadmin Dashboard/process/addbranches process.php. The manipulation of...