Lucene search
+L

3945 matches found

Vulnrichment
Vulnrichment
•added 2022/09/23 5:28 a.m.•8 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

6.7AI score0.01241EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/09/23 5:28 a.m.•60 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

7.9AI score0.01241EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/09/23 5:28 a.m.•99 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS8AI score0.01241EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/23 12:00 a.m.•1 views

CVE-2020-36604: Improperly Controlled Modification of Object Prototype Attributes

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS7.5AI score0.01241EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/09/23 12:00 a.m.•16 views

hoek 安全漏洞

hoek is part of the hapi ecosystem open-sourced by hapi.js. It is designed to work seamlessly with the hapi web framework and its other components. A security vulnerability exists in hoek versions prior to 8.5.1 that stems from prototype poisoning in the clone function...

8.1CVSS7.4AI score0.01241EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/09/23 12:00 a.m.•33 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS7.1AI score0.01241EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2022/09/16 5:12 p.m.•4 views

cargo-c (0.9.14+cargo-0.66), cargo-clone-core (0.2.0) +7 more potentially affected by CVE-2022-36114 via cargo (0.66.0)

cargo CARGO version 0.66.0 is affected by a known vulnerability. The following packages have a transitive dependency on cargo and may be impacted: - cargo-c 0.9.14+cargo-0.66 - cargo-clone-core 0.2.0 - cargo-instruments 0.4.8 - cargo-patch 0.2.9 - cargo-udeps 0.1.35 - publish-action =0.2.0, =0.1....

6.5CVSS6.4AI score0.00945EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/09/07 12:00 a.m.•7 views

PT-2022-23156

Name of the Vulnerable Software and Affected Versions Poetry versions prior to 1.1.9 Poetry versions prior to 1.2.0b1 Description Poetry is a dependency manager for Python that uses various commands, such as git clone, when handling dependencies from a Git repository. The commands are constructed...

7.3CVSS7.2AI score0.01357EPSS
SaveExploits1References19
attackerkb
attackerkb
•added 2022/08/25 3:15 p.m.•7 views

CVE-2022-37100

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone...

9.8CVSS7.4AI score0.01174EPSS
SaveExploits1References2
OSV
OSV
•added 2022/08/25 2:15 p.m.•19 views

CVE-2022-37068

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...

9.8CVSS5.8AI score0.01173EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/08/25 2:15 p.m.•10 views

CVE-2022-37068

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...

9.8CVSS7.4AI score0.01173EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/08/25 2:15 p.m.•12 views

CVE-2022-36503

H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateMacClone...

7.8CVSS7.7AI score0.00787EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/25 12:00 a.m.•17 views

H3C GR-1200W 缓冲区错误漏洞

The H3C GR-1200W is a Gigabit enterprise wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C GR-1200W MiniGRW1A0V100R006 version that stems from a stack overflow in the UpdateMacCloneFinal method...

9.8CVSS5.6AI score0.01173EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/25 12:00 a.m.•19 views

H3C Magic NX18 Plus 缓冲区错误漏洞

The H3C Magic NX18 Plus is a Gigabit dual-band router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic NX18 Plus NX18PV100R003 version, which stems from a stack overflow issue in the UpdateMacClone method...

7.8CVSS5.8AI score0.00787EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/25 12:00 a.m.•20 views

H3C H200 缓冲区错误漏洞

H3C H200 is a kind of full Gigabit Home Smart Hub from China's Xinhua San H3C. A security vulnerability exists in the H3C H200 H200V100R004 version, which stems from a stack overflow issue in the UpdateMacClone method...

9.8CVSS5.6AI score0.01174EPSS
SaveExploits1References2
Veracode
Veracode
•added 2022/07/07 9:21 a.m.•50 views

Command Injection

git-clone is vulnerable to command injection. The vulnerability exists due to the insecure usage of the --upload-pack feature of git. An attacker with the ability to control the options object provided to the clone function through the options.args array, is able to inject arbitrary commands to r...

9.8CVSS9.4AI score0.03506EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2022/07/02 12:00 a.m.•152 views

GHSA-8JMW-WJR8-2X66 Command injection in git-clone

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git. Credits Credit to @lirantal for discovering this vulnerability...

8.1CVSS5.9AI score0.03506EPSS
SaveExploits1References5
vulnersOsv
vulnersOsv
•added 2022/07/02 12:00 a.m.•6 views

-llscw-react-cli (>=1.0.0, <=1.1.0), 002-node-cli (1.0.0) +13024 more potentially affected by CVE-2022-25900 via git-clone (>=0.0.2, <=0.1.0)

git-clone NPM version =0.0.2, =1.0.0, =0.0.1, =1.0.0, =1.0.11 and more Source cves: CVE-2022-25900 Source advisory: OSV:GHSA-8JMW-WJR8-2X66...

10CVSS8.2AI score0.03506EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/07/02 12:00 a.m.•141 views

Command injection in git-clone

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git. Credits Credit to @lirantal for discovering this vulnerability...

10CVSS9.4AI score0.03506EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2022/07/01 8:15 p.m.•86 views

CVE-2022-25900

All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git...

10CVSS0.03506EPSS
SaveExploits1References2
Rows per page
Query Builder