Lucene search
+L

213 matches found

Tenable Nessus
Tenable Nessus
added 2012/11/29 12:0 a.m.26 views

Fedora 16 : cgit-0.9.1-2.fc16 (2012-18462)

Fix syntax highlight to use the correct version of highlight. Update to new upsteam version with 2 security fixes, enhancements and misc other bug fixes. See http://git.zx2c4.com/cgit/commit/?id=a6a932e198e8b6b564d7a4bb43e78078d 8296026 for details. Note that Tenable Network Security has extracte...

6CVSS8.2AI score0.02752EPSS
SaveExploits0References6
Fedora
Fedora
added 2012/11/28 11:46 a.m.46 views

[SECURITY] Fedora 16 Update: cgit-0.9.1-2.fc16

Cgit is a fast web interface for git. It uses caching to increase performa nce...

6.5CVSS1.6AI score0.03383EPSS
SaveExploits0
Fedora
Fedora
added 2012/11/28 11:28 a.m.29 views

[SECURITY] Fedora 17 Update: cgit-0.9.1-2.fc17

Cgit is a fast web interface for git. It uses caching to increase performa nce...

6.5CVSS1.6AI score0.03383EPSS
SaveExploits0
Fedora
Fedora
added 2012/11/23 7:18 a.m.32 views

[SECURITY] Fedora 18 Update: cgit-0.9.1-2.fc18

Cgit is a fast web interface for git. It uses caching to increase performa nce...

6CVSS1.6AI score0.02752EPSS
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2012/11/12 11:8 a.m.32 views

update for cgit (important)

Specially-crafted commits can cause code to be executed on the clients due to improperly quoted arguments...

6CVSS3.4AI score0.02752EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2012/11/12 11:8 a.m.26 views

update for cgit (important)

Specially-crafted commits can cause code to be executed on the clients due to improperly quoted arguments...

6CVSS3.4AI score0.02752EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2012/11/11 11:0 a.m.31 views

CVE-2012-4548

Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command...

7.2AI score0.02752EPSS
SaveExploits0References13
Debian CVE
Debian CVE
added 2012/11/11 11:0 a.m.46 views

CVE-2012-4548

Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command...

6CVSS9.4AI score0.02752EPSS
SaveExploits0
CVE
CVE
added 2012/11/11 11:0 a.m.51 views

CVE-2012-4548

CVE-2012-4548 affects cgit up to version 9.0.3, via an argument injection in syntax-highlighting.sh that allows remote authenticated users with file-adding permissions to execute arbitrary commands through the --plug-in argument to the highlight command. Root cause: improper handling of plugin ar...

6CVSS7.3AI score0.02752EPSS
SaveExploits0References13Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2012/10/31 4:12 p.m.21 views

update for cgit (important)

Specially-crafted commits could trigger a heap-based buffer overflow...

6.5CVSS3.1AI score0.03383EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2012/10/31 4:11 p.m.24 views

update for cgit (important)

Specially-crafted commits could trigger a heap-based buffer overflow...

6.5CVSS3.1AI score0.03383EPSS
SaveExploits0References1
NVD
NVD
added 2012/10/10 6:55 p.m.22 views

CVE-2012-4465

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via an empty username in the "Author" field in a commit...

6.5CVSS7.6AI score0.03383EPSS
SaveExploits0References7
CVE
CVE
added 2012/10/10 6:0 p.m.56 views

CVE-2012-4465

CVE-2012-4465 affects cgit up to version 0.9.0.3, where a heap-based buffer overflow in substr in parsing.c can be triggered by an empty Author field in a commit. This allows remote authenticated users to cause a crash and potentially execute arbitrary code. The vulnerability has been addressed i...

6.5CVSS7.7AI score0.03383EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2012/10/10 6:0 p.m.64 views

CVE-2012-4465

Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via an empty username in the "Author" field in a commit...

6.5CVSS9.5AI score0.03383EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2012/03/12 12:0 a.m.23 views

Fedora 16 : systemd-37-15.fc16 (2012-2557)

This systemd update adds several fixes : - logind created files under /run/user/ in an insecure manner. A local attacker could create a symlink inside arbitrary directories CVE-2012-0871. - permissions of PrivateTmp directories RHBZ790522 - timedated did not run without ntp installed RHBZ790260 -...

6.3CVSS5.7AI score0.00355EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2011/08/19 12:0 a.m.22 views

Fedora Update for cgit FEDORA-2011-9588

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2011-9588 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

5CVSS0.2AI score0.03746EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2011/08/19 12:0 a.m.19 views

Fedora Update for cgit FEDORA-2011-9589

Check for the Version of cgit OpenVAS Vulnerability Test Fedora Update for cgit FEDORA-2011-9589 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

3.5CVSS0.2AI score0.01882EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2011/08/19 12:0 a.m.23 views

Fedora Update for cgit FEDORA-2011-9589

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

3.5CVSS6.6AI score0.01882EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2011/08/19 12:0 a.m.25 views

Fedora Update for cgit FEDORA-2011-9588

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

5CVSS6.5AI score0.03746EPSS
SaveExploits1References2
Fedora
Fedora
added 2011/08/17 1:15 a.m.35 views

[SECURITY] Fedora 15 Update: cgit-0.9.0.2-2.fc15

Cgit is a fast web interface for git. It uses caching to increase performa nce...

3.5CVSS6.4AI score0.01882EPSS
SaveExploits0
Rows per page
Query Builder