Huawei EulerOS: Security Advisory for git (EulerOS-SA-2025-1356)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2024-52005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the remote Git...

CVE-2024-52005

A flaw was found in Git. When cloning, fetching, or pushing from a server, informational or error messages are transported from the remote Git process to the client via a sideband channel. These messages are prefixed with "remote:" and printed directly to the standard error output. Typically, thi...

CVE-2024-52005 The sideband payload is passed unfiltered to the terminal in git

Git is a source code management tool. When cloning from a server or fetching, or pushing, informational or error messages are transported from the remote Git process to the client via the so-called "sideband channel". These messages will be prefixed with "remote:" and printed directly to the...

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server

Microsoft discovered, responsibly disclosed, and helped remediate four vulnerabilities that could be remotely exploited by unauthenticated attackers in Perforce Helix Core Server “Helix Core Server”, a source code management platform largely used in the videogame industry and by multiple...

The vulnerability of the Git Bitbucket Server and Data Center-based code deployment, management, and collaboration tools lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Git Bitbucket Server and Data Center-based code deployment, management, and collaboration tools is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Enhanced policy management with GitOps and Terraform

Wiz announces new GitOps workflows and Terraform provider, enabling customers to manage policies as code...

Git Source Code Management Code Execution (CVE-2021-21300)

An improper link resolution exists in the checkout mechanism of Git Source Code Management git-scm by Git. An out-of-order checkout triggered by a delayed checkout or checkout-index may result in an improper validation of a file resource type prior to performing a file write operation. A remote...

Jenkins Git Plugin 信息泄露漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability...

workflow-cps-global-lib: OS command execution through crafted SCM contents

A flaw was found in Jenkins. The JenkinsPipeline: Shared Groovy Libraries uses the same checkout directories for distinct SCMs for Pipeline libraries. This flaw allows attackers with item/configure permission to invoke arbitrary OS commands on the controller through crafted SCM contents. This...

Vulnerabilities of Microsoft 365, Microsoft Excel, Microsoft Office, Microsoft SharePoint, and Microsoft Office Web Apps are related to improper code generation, allowing attackers to execute arbitrary code.

Vulnerabilities of Microsoft 365, Microsoft Excel, Microsoft Office, Microsoft SharePoint, and Microsoft Office Web Apps are related to improper code generation management. Exploitation of these vulnerabilities can allow a malicious actor to execute arbitrary code remotely...

Command Execution Vulnerability in GitLab

GitLab is developed by GitLab Inc. is an open source project for warehouse management system , using Git as a code management tool , can be accessed through the Web interface to public or private projects . GitLab suffers from a command execution vulnerability that can be exploited by an attacker...

Enalean Tuleap SQL Injection Vulnerability (CNVD-2021-103507)

Enalean Tuleap is a set of open source software development and project management tools from the French company Enalean. The tool provides enterprise application lifecycle management, as well as project tracking, source code management and team collaboration.Enalean Tuleap is vulnerable to SQL...

Enalean Tuleap Injection Vulnerability

Enalean Tuleap is a set of open source software development and project management tools from the French company Enalean. The tool provides enterprise application lifecycle management, as well as project tracking, source code management, and team collaboration.Enalean Tuleap suffers from an...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41721)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-41723)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve work efficiency, access to more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit the...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-41722)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve work efficiency, access to more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers ...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-40236)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-40237)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

SQL Injection Vulnerability in Ricochet Cloud's WeChat Live Code Management System

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the RikCloud WeChat Live Code Management System. An attacker can exploit this vulnerability to...