Lucene search
+L

3939 matches found

OSV
OSV
•added 2022/12/06 6:30 a.m.•53 views

GHSA-9P95-FXVG-QGQ2 simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

8.1CVSS9AI score0.02903EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2022/12/06 6:30 a.m.•64 views

GitPython vulnerable to Remote Code Execution due to improper user input validation

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS3.9AI score0.05652EPSS
SaveExploits2References20Affected Software1
OSV
OSV
•added 2022/12/06 6:30 a.m.•55 views

GHSA-HCPJ-QP55-GFPH GitPython vulnerable to Remote Code Execution due to improper user input validation

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.2CVSS7.3AI score0.05652EPSS
SaveExploits2References20
Github Security Blog
Github Security Blog
•added 2022/12/06 6:30 a.m.•51 views

simple-git vulnerable to Remote Code Execution when enabling the ext transport protocol

The package simple-git before 3.15.0 is vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

9.8CVSS4.5AI score0.02903EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2022/12/06 5:15 a.m.•4 views

DEBIAN-CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS8.6AI score0.05652EPSS
SaveExploits2References1
OSV
OSV
•added 2022/12/06 5:15 a.m.•36 views

CVE-2022-24439 Remote Code Execution (RCE)

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

8.1CVSS7.4AI score
SaveExploits0References11
OSV
OSV
•added 2022/12/06 5:15 a.m.•31 views

CVE-2022-25912 Remote Code Execution (RCE)

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

8.1CVSS7.3AI score
SaveExploits0References7
PyPA
PyPA
•added 2022/12/06 5:15 a.m.•22 views

PYSEC-2022-42992

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.7AI score0.05652EPSS
SaveExploits2References8Affected Software1
OSV
OSV
•added 2022/12/06 5:15 a.m.•19 views

PYSEC-2022-42992

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.3AI score0.05652EPSS
SaveExploits2References8
OSV
OSV
•added 2022/12/06 5:15 a.m.•17 views

UBUNTU-CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.3AI score0.05652EPSS
SaveExploits2References6
UbuntuCve
UbuntuCve
•added 2022/12/06 5:15 a.m.•92 views

CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.2AI score0.05652EPSS
SaveExploits2References5
Prion
Prion
•added 2022/12/06 5:15 a.m.•25 views

Design/Logic Flaw

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

7.5CVSS9.6AI score0.03896EPSS
SaveExploits2References5Affected Software1
CNNVD
CNNVD
•added 2022/12/06 12:00 a.m.•22 views

Simple Git 操作系统命令注入漏洞

Simple Git is a lightweight interface from Steve King Personal Developer in the UK. It is used to run Git commands in any Node.js application. An operating system command injection vulnerability exists in Simple Git versions prior to 3.15.0, which stems from vulnerability to Remote Code Execution...

9.8CVSS8.5AI score0.02903EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/12/06 12:00 a.m.•9 views

PT-2022-17600

Name of the Vulnerable Software and Affected Versions simple-git versions prior to 3.15.0 Description The issue allows for Remote Code Execution RCE when the ext transport protocol is enabled, making it exploitable via the clone method. This is due to an incomplete fix of a previous issue...

9.8CVSS8.6AI score0.02903EPSS
SaveExploits1References21
Positive Technologies
Positive Technologies
•added 2022/11/30 12:00 a.m.•19 views

PT-2025-53961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue was identified and resolved in the Linux kernel related to dm clone functionality within the clone dtr function. The issue also exists when dm resume and dm...

4.6CVSS6.8AI score0.00244EPSS
SaveExploits0
Veeam
Veeam
•added 2022/11/18 12:00 a.m.•834 views

Agent failed to process method {ReFs.SetFileIntegrity}.

Challenge A Backup or Backup Copy job fails with the following error message: Error: Incorrect function. Agent failed to process method ReFs.SetFileIntegrity. If this error occurs when a job is targeting a Cloud Repository, the VCSP Veeam Cloud Service Provider must review and perform the Solutio...

6.9AI score
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2022/11/15 11:55 a.m.•19 views

kernel: netfilter: nf_tables: possible module reference underflow in error path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: possible module reference underflow in error path dst-ops is set on when nftexprclone fails, but module refcount has not been bumped yet, therefore nftexprdestroy leads to module reference underflow...

7.8CVSS6.2AI score0.00197EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/11/15 12:00 a.m.•17 views

PT-2025-25974 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible module reference underflow in the error path of the netfilter nf tables component has been identified. This issue occurs when nft expr clone fails, and dst-ops is set, but t...

8.8CVSS6.4AI score0.10202EPSS
SaveExploits53References603
OSV
OSV
•added 2022/11/14 6:31 p.m.•16 views

GSD-2022-1006675 drbd: only clone bio if we have a backing device

drbd: only clone bio if we have a backing device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•1 views

PT-2022-35233

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.76 Description The issue is related to a possible NULL dereference in the skb clone function. This problem was introduced in version v3.17 and is fixed in Linux Kernel version v5.15.76. The actual impact an...

5.6AI score
SaveExploits0References1
Rows per page
Query Builder