Lucene search
+L

3384 matches found

OSV
OSV
added 2022/12/06 6:30 a.m.48 views

GHSA-9P95-FXVG-QGQ2 simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

8.1CVSS9AI score0.02784EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2022/12/06 6:30 a.m.52 views

GitPython vulnerable to Remote Code Execution due to improper user input validation

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS3.9AI score0.05378EPSS
SaveExploits1References20Affected Software1
OSV
OSV
added 2022/12/06 6:30 a.m.32 views

GHSA-HCPJ-QP55-GFPH GitPython vulnerable to Remote Code Execution due to improper user input validation

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.2CVSS7.3AI score0.05378EPSS
SaveExploits1References20
Github Security Blog
Github Security Blog
added 2022/12/06 6:30 a.m.41 views

simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

9.8CVSS4.5AI score0.02784EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2022/12/06 5:15 a.m.1 views

DEBIAN-CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS8.6AI score0.05378EPSS
SaveExploits1References1
OSV
OSV
added 2022/12/06 5:15 a.m.29 views

CVE-2022-24439 Remote Code Execution (RCE)

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

8.1CVSS7.4AI score
SaveExploits0References11
OSV
OSV
added 2022/12/06 5:15 a.m.27 views

CVE-2022-25912 Remote Code Execution (RCE)

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

8.1CVSS7.3AI score
SaveExploits0References7
PyPA
PyPA
added 2022/12/06 5:15 a.m.9 views

PYSEC-2022-42992

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.7AI score0.05378EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2022/12/06 5:15 a.m.13 views

PYSEC-2022-42992

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.3AI score0.05378EPSS
SaveExploits1References8
UbuntuCve
UbuntuCve
added 2022/12/06 5:15 a.m.88 views

CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.2AI score0.05378EPSS
SaveExploits1References5
OSV
OSV
added 2022/12/06 5:15 a.m.11 views

UBUNTU-CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.3AI score0.05378EPSS
SaveExploits1References6
Prion
Prion
added 2022/12/06 5:15 a.m.21 views

Design/Logic Flaw

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

7.5CVSS9.6AI score0.04067EPSS
SaveExploits2References5Affected Software1
CNNVD
CNNVD
added 2022/12/06 12:0 a.m.13 views

Simple Git 操作系统命令注入漏洞

Simple Git is a lightweight interface from Steve King Personal Developer in the UK. It is used to run Git commands in any Node.js application. An operating system command injection vulnerability exists in Simple Git versions prior to 3.15.0, which stems from vulnerability to Remote Code Execution...

9.8CVSS8.5AI score0.02784EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/12/06 12:0 a.m.6 views

PT-2022-17600

Name of the Vulnerable Software and Affected Versions simple-git versions prior to 3.15.0 Description The issue allows for Remote Code Execution RCE when the ext transport protocol is enabled, making it exploitable via the clone method. This is due to an incomplete fix of a previous issue...

9.8CVSS8.6AI score0.02784EPSS
SaveExploits1References21
Veeam
Veeam
added 2022/11/18 12:0 a.m.770 views

Agent failed to process method {ReFs.SetFileIntegrity}.

Challenge A Backup or Backup Copy job fails with the following error message: Error: Incorrect function. Agent failed to process method ReFs.SetFileIntegrity. If this error occurs when a job is targeting a Cloud Repository, the VCSP Veeam Cloud Service Provider must review and perform the Solutio...

6.9AI score
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
added 2022/11/15 11:55 a.m.7 views

kernel: netfilter: nf_tables: possible module reference underflow in error path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: possible module reference underflow in error path dst-ops is set on when nftexprclone fails, but module refcount has not been bumped yet, therefore nftexprdestroy leads to module reference underflow...

7.8CVSS6.2AI score0.00166EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/11/15 12:0 a.m.6 views

PT-2025-25974 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible module reference underflow in the error path of the netfilter nf tables component has been identified. This issue occurs when nft expr clone fails, and dst-ops is set, but t...

8.8CVSS6.5AI score0.10458EPSS
SaveExploits51References603
OSV
OSV
added 2022/11/14 6:31 p.m.12 views

GSD-2022-1006675 drbd: only clone bio if we have a backing device

drbd: only clone bio if we have a backing device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.7 views

PT-2022-35451 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a possible NULL dereference in the skb clone function. This problem was introduced in version v3.17 and is fixed in Linux Kernel version v5.10.152. The actual impac...

7.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/14 12:0 a.m.7 views

PT-2022-34938 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to a possible NULL dereference in the skb clone function. This problem was introduced in version v3.17 and is fixed in Linux Kernel version v6.0.6. The actual impact and...

7AI score
SaveExploits0References1
Rows per page
Query Builder