Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

186 matches found

Amazon
Amazon•added 2026/10/12 12:00 a.m.•6 views

Medium: amazon-ecr-credential-helper

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

7.8CVSS6.3AI score0.00382EPSS
SaveExploits0
Amazon
Amazon•added 2026/10/12 12:00 a.m.•5 views

Medium: amazon-ecr-credential-helper

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

7.8CVSS6.3AI score0.00382EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2026/10/12 12:00 a.m.•8 views

Amazon Linux 2 : amazon-ecr-credential-helper (ALASNITRO-ENCLAVES-2026-121)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-121 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations...

7.8CVSS6.2AI score0.00382EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus•added 2026/10/12 12:00 a.m.•8 views

Amazon Linux 2 : amazon-ecr-credential-helper (ALASECS-2026-142)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-142 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of...

7.8CVSS6.2AI score0.00382EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus•added 2026/10/12 12:00 a.m.•7 views

Amazon Linux 2 : amazon-ecr-credential-helper (ALASDOCKER-2026-145)

The version of amazon-ecr-credential-helper installed on the remote host is prior to 0.12.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-145 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside ...

7.8CVSS6.2AI score0.00382EPSS
SaveExploits0References6
Amazon
Amazon•added 2026/10/12 12:00 a.m.•6 views

Medium: amazon-ecr-credential-helper

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

7.8CVSS6.3AI score0.00382EPSS
SaveExploits0
Amazon
Amazon•added 2026/10/12 12:00 a.m.•7 views

Medium: amazon-ecr-credential-helper

Issue Overview: On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symboli...

7.8CVSS6.3AI score0.00382EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus•added 2026/10/12 12:00 a.m.•8 views

Amazon Linux 2023 : amazon-ecr-credential-helper (ALAS2023-2026-3180)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3180 advisory. On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /...

7.8CVSS6.1AI score0.00382EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus•added 2026/09/13 12:00 a.m.•27 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2026-090128)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090128 advisory. Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. This bug is similar to...

7.5CVSS7AI score0.03867EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus•added 2026/09/13 12:00 a.m.•12 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2026-090421)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090421 advisory. Affected versions of Git have a vulnerability whereby Git can be tricked into sending private credentials to a host controlled by an attacker. Git uses external...

9.3CVSS7AI score0.09966EPSS
SaveExploits2References4
NVD
NVD•added 2026/08/28 12:16 p.m.•25 views

CVE-2026-82249

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

3.1CVSS0.00267EPSS
SaveExploits0References2
osv_debian
osv_debian•added 2026/08/28 12:16 p.m.•16 views

DEBIAN-CVE-2026-82249

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

2.3CVSS5.9AI score0.00267EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu•added 2026/08/28 12:16 p.m.•18 views

UBUNTU-CVE-2026-82249

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

3.1CVSS5.9AI score0.00267EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve•added 2026/08/28 12:16 p.m.•22 views

CVE-2026-82249

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

3.1CVSS5.9AI score0.00267EPSS
SaveExploits0References3
Mend
Mend•added 2026/08/28 10:49 a.m.•10 views

CVE-2026-82249

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

3.1CVSS5.9AI score0.00267EPSS
SaveExploits0References4
Cvelist
Cvelist•added 2026/08/28 10:49 a.m.•47 views

CVE-2026-82249 gitoxide before 0.38.2 Credential Helper Protocol Field Injection

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

3.1CVSS0.00267EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment•added 2026/08/28 10:49 a.m.•16 views

CVE-2026-82249 gitoxide before 0.38.2 Credential Helper Protocol Field Injection

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

3.1CVSS5.9AI score0.00267EPSS
SaveExploits0References2
Debian CVE
Debian CVE•added 2026/08/28 10:49 a.m.•22 views

CVE-2026-82249

gitoxide before 0.38.2 fails to validate carriage return characters in URL values passed to credential helpers. Attackers can supply URLs containing bare carriage returns to inject additional helper protocol fields and cause credential helpers to return credentials for attacker-specified hosts...

3.1CVSS5.9AI score0.00267EPSS
SaveExploits0
NVD
NVD•added 2026/08/18 9:16 p.m.•23 views

CVE-2026-53455

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in customcomponents/blueprintstudio/backend/gitmanager.py by interpolating the configured Git username and token directly into...

8.6CVSS0.00501EPSS
SaveExploits0References3
EUVD
EUVD•added 2026/08/18 8:49 p.m.•17 views

EUVD-2026-61486

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in customcomponents/blueprintstudio/backend/gitmanager.py by interpolating the configured Git username and token directly into...

8.6CVSS5.9AI score0.00501EPSS
SaveExploits0References3
Rows per page
Query Builder