Lucene search
+L

4202 matches found

osv_cve
osv_cve
•added 2022/12/06 5:15 a.m.•36 views

CVE-2022-24439 Remote Code Execution (RCE)

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

8.1CVSS7.4AI score
SaveExploits0References11
osv_debian
osv_debian
•added 2022/12/06 5:15 a.m.•7 views

DEBIAN-CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS8.6AI score0.05941EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2022/12/06 5:15 a.m.•94 views

CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.2AI score0.05941EPSS
SaveExploits2References5
Prion
Prion
•added 2022/12/06 5:15 a.m.•27 views

Design/Logic Flaw

The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...

7.5CVSS9.6AI score0.03896EPSS
SaveExploits2References5Affected Software1
PyPA
PyPA
•added 2022/12/06 5:15 a.m.•22 views

PYSEC-2022-42992

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.7AI score0.05941EPSS
SaveExploits2References8Affected Software1
osv_ubuntu
osv_ubuntu
•added 2022/12/06 5:15 a.m.•18 views

UBUNTU-CVE-2022-24439

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.3AI score0.05941EPSS
SaveExploits2References6
osv_pysec
osv_pysec
•added 2022/12/06 5:15 a.m.•22 views

PYSEC-2022-42992

All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...

9.8CVSS7.3AI score0.05941EPSS
SaveExploits2References8
Positive Technologies
Positive Technologies
•added 2022/12/06 12:00 a.m.•13 views

PT-2022-17600

Name of the Vulnerable Software and Affected Versions simple-git versions prior to 3.15.0 Description The issue allows for Remote Code Execution RCE when the ext transport protocol is enabled, making it exploitable via the clone method. This is due to an incomplete fix of a previous issue...

9.8CVSS8.6AI score0.03077EPSS
SaveExploits1References21
CNNVD
CNNVD
•added 2022/12/06 12:00 a.m.•26 views

Simple Git 操作系统命令注入漏洞

Simple Git is a lightweight interface from Steve King Personal Developer in the UK. It is used to run Git commands in any Node.js application. An operating system command injection vulnerability exists in Simple Git versions prior to 3.15.0, which stems from vulnerability to Remote Code Execution...

9.8CVSS8.5AI score0.03077EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/12/06 12:00 a.m.•3 views

PT-2022-7372

Name of the Vulnerable Software and Affected Versions gitpython versions affected versions not specified Description The issue is related to improper user input validation in the gitpython library, which allows for Remote Code Execution RCE due to insufficient sanitization of input arguments when...

10CVSS0.05941EPSS
SaveExploits2References64
Positive Technologies
Positive Technologies
•added 2022/11/30 12:00 a.m.•20 views

PT-2025-53961

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF issue was identified and resolved in the Linux kernel related to dm clone functionality within the clone dtr function. The issue also exists when dm resume and dm...

4.6CVSS6.8AI score0.00244EPSS
SaveExploits0
Veeam
Veeam
•added 2022/11/18 12:00 a.m.•837 views

Agent failed to process method {ReFs.SetFileIntegrity}.

Challenge A Backup or Backup Copy job fails with the following error message: Error: Incorrect function. Agent failed to process method ReFs.SetFileIntegrity. If this error occurs when a job is targeting a Cloud Repository, the VCSP Veeam Cloud Service Provider must review and perform the Solutio...

6.9AI score
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2022/11/15 11:55 a.m.•19 views

kernel: netfilter: nf_tables: possible module reference underflow in error path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: possible module reference underflow in error path dst-ops is set on when nftexprclone fails, but module refcount has not been bumped yet, therefore nftexprdestroy leads to module reference underflow...

7.8CVSS6.2AI score0.00197EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/11/15 12:00 a.m.•17 views

PT-2025-25974 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible module reference underflow in the error path of the netfilter nf tables component has been identified. This issue occurs when nft expr clone fails, and dst-ops is set, but t...

8.8CVSS6.4AI score0.10202EPSS
SaveExploits54References603
osv_gsd
osv_gsd
•added 2022/11/14 6:31 p.m.•21 views

GSD-2022-1006675 drbd: only clone bio if we have a backing device

drbd: only clone bio if we have a backing device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.6 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•11 views

PT-2022-34938 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.6 Description: The issue is related to a possible NULL dereference in the skb clone function. This problem was introduced in version v3.17 and is fixed in Linux Kernel version v6.0.6. The actual impact and...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•4 views

PT-2022-35233

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.76 Description The issue is related to a possible NULL dereference in the skb clone function. This problem was introduced in version v3.17 and is fixed in Linux Kernel version v5.15.76. The actual impact an...

5.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•16 views

PT-2022-35451 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.152 Description: The issue is related to a possible NULL dereference in the skb clone function. This problem was introduced in version v3.17 and is fixed in Linux Kernel version v5.10.152. The actual impac...

7.1AI score
SaveExploits0References1
Snyk
Snyk
•added 2022/11/13 12:55 p.m.•5 views

Remote Code Execution (RCE)

Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting...

9.8CVSS7.3AI score0.05941EPSS
SaveExploits2References2
Snyk
Snyk
•added 2022/11/10 1:55 p.m.•8 views

Remote Code Execution (RCE)

Overview simple-git is a light weight interface for running git commands in any node.js application. Affected versions of this package are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due t...

9.8CVSS7.4AI score0.03896EPSS
SaveExploits2References2
Rows per page
Query Builder