Lucene search
K

3098 matches found

Cvelist
Cvelist
added 2022/09/23 5:28 a.m.15 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

7.9AI score0.01047EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2022/09/23 12:0 a.m.24 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS7.1AI score0.01047EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.2 views

hoek 安全漏洞

hoek is part of the hapi ecosystem open-sourced by hapi.js. It is designed to work seamlessly with the hapi web framework and its other components. A security vulnerability exists in hoek versions prior to 8.5.1 that stems from prototype poisoning in the clone function...

8.1CVSS7.4AI score0.01047EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/09/07 12:0 a.m.1 views

PT-2022-23156

Name of the Vulnerable Software and Affected Versions Poetry versions prior to 1.1.9 Poetry versions prior to 1.2.0b1 Description Poetry is a dependency manager for Python that uses various commands, such as git clone, when handling dependencies from a Git repository. The commands are constructed...

7.3CVSS7.2AI score0.0072EPSS
Exploits1References19
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.0 views

CVE-2022-37100

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone...

9.8CVSS7.4AI score0.00459EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/25 2:15 p.m.1 views

CVE-2022-37068

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...

9.8CVSS7.4AI score0.00459EPSS
Exploits1References2
OSV
OSV
added 2022/08/25 2:15 p.m.3 views

CVE-2022-37068

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...

9.8CVSS5.8AI score0.00459EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/25 2:15 p.m.2 views

CVE-2022-36503

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone...

7.8CVSS7.7AI score0.0006EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.1 views

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the UpdateMacClone method...

9.8CVSS5.6AI score0.00459EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.1 views

H3C Magic NX18 Plus 缓冲区错误漏洞

The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow issue in the UpdateMacClone method...

7.8CVSS5.8AI score0.0006EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/08/25 12:0 a.m.1 views

H3C GR-1200W 缓冲区错误漏洞

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the UpdateMacCloneFinal method...

9.8CVSS5.6AI score0.00459EPSS
Exploits1References2
Veracode
Veracode
added 2022/07/07 9:21 a.m.37 views

Command Injection

git-clone is vulnerable to command injection. The vulnerability exists due to the insecure usage of the --upload-pack feature of git. An attacker with the ability to control the options object provided to the clone function through the options.args array, is able to inject arbitrary commands to r...

9.8CVSS9.4AI score0.04697EPSS
Exploits1References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/07/02 12:0 a.m.124 views

Command injection in git-clone

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git. Credits Credit to @lirantal for discovering this vulnerability...

10CVSS9.4AI score0.04697EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2022/07/02 12:0 a.m.3 views

GHSA-8JMW-WJR8-2X66 Command injection in git-clone

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git. Credits Credit to @lirantal for discovering this vulnerability...

8.1CVSS5.9AI score0.04697EPSS
Exploits1References5
vulnersOsv
vulnersOsv
added 2022/07/02 12:0 a.m.2 views

-llscw-react-cli (>=1.0.0 <=1.1.0-beta2), 002-node-cli (=1.0.0) +13402 more potentially affected by CVE-2022-25900 via git-clone (>=0.0.2 <=0.2.0)

git-clone NPM version =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.11 and more Source cves: CVE-2022-25900 Source advisory: OSV:GHSA-8JMW-WJR8-2X66...

10CVSS7.2AI score0.04697EPSS
Exploits1
NVD
NVD
added 2022/07/01 8:15 p.m.14 views

CVE-2022-25900

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...

10CVSS0.04697EPSS
Exploits1References2
OSV
OSV
added 2022/07/01 8:15 p.m.2 views

CVE-2022-25900

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...

9.8CVSS7.3AI score0.04697EPSS
Exploits1References2
Prion
Prion
added 2022/07/01 8:15 p.m.15 views

Command injection

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...

10CVSS9.7AI score0.04697EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/07/01 8:5 p.m.17 views

CVE-2022-25900 Command Injection

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...

8.1CVSS9.9AI score0.04697EPSS
Exploits1References2
CVE
CVE
added 2022/07/01 8:5 p.m.93 views

CVE-2022-25900

CVE-2022-25900 affects the npm package git-clone. All versions are vulnerable to Command Injection due to insecure usage of git’s --upload-pack feature, as stated in the CVE description and corroborated by multiple connected sources. The root cause is improper handling/neutralization of arguments...

10CVSS9.2AI score0.04697EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder