3098 matches found
CVE-2020-36604
hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...
CVE-2020-36604
hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...
hoek 安全漏洞
hoek is part of the hapi ecosystem open-sourced by hapi.js. It is designed to work seamlessly with the hapi web framework and its other components. A security vulnerability exists in hoek versions prior to 8.5.1 that stems from prototype poisoning in the clone function...
PT-2022-23156
Name of the Vulnerable Software and Affected Versions Poetry versions prior to 1.1.9 Poetry versions prior to 1.2.0b1 Description Poetry is a dependency manager for Python that uses various commands, such as git clone, when handling dependencies from a Git repository. The commands are constructed...
CVE-2022-37100
H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone...
CVE-2022-37068
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...
CVE-2022-37068
H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...
CVE-2022-36503
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone...
H3C H200 缓冲区错误漏洞
H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the UpdateMacClone method...
H3C Magic NX18 Plus 缓冲区错误漏洞
The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow issue in the UpdateMacClone method...
H3C GR-1200W 缓冲区错误漏洞
The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the UpdateMacCloneFinal method...
Command Injection
git-clone is vulnerable to command injection. The vulnerability exists due to the insecure usage of the --upload-pack feature of git. An attacker with the ability to control the options object provided to the clone function through the options.args array, is able to inject arbitrary commands to r...
Command injection in git-clone
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git. Credits Credit to @lirantal for discovering this vulnerability...
GHSA-8JMW-WJR8-2X66 Command injection in git-clone
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git. Credits Credit to @lirantal for discovering this vulnerability...
-llscw-react-cli (>=1.0.0 <=1.1.0-beta2), 002-node-cli (=1.0.0) +13402 more potentially affected by CVE-2022-25900 via git-clone (>=0.0.2 <=0.2.0)
git-clone NPM version =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.11 and more Source cves: CVE-2022-25900 Source advisory: OSV:GHSA-8JMW-WJR8-2X66...
CVE-2022-25900
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...
CVE-2022-25900
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...
Command injection
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...
CVE-2022-25900 Command Injection
All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...
CVE-2022-25900
CVE-2022-25900 affects the npm package git-clone. All versions are vulnerable to Command Injection due to insecure usage of git’s --upload-pack feature, as stated in the CVE description and corroborated by multiple connected sources. The root cause is improper handling/neutralization of arguments...