Lucene search
+L

10959 matches found

NVD
NVD
added 2023/09/10 6:15 p.m.21 views

CVE-2023-4878

Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

5.4CVSS4.9AI score0.00317EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/09/10 5:53 p.m.37 views

CVE-2023-4879 Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...

3.5CVSS5.2AI score0.00348EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/09/10 5:49 p.m.28 views

CVE-2023-4878 Server-Side Request Forgery (SSRF) in instantsoft/icms2

Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

4.3CVSS5.8AI score0.00317EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/09/10 12:00 a.m.8 views

PT-2023-30961 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1.-git. Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository instantsoft/icms2. Recommendations: For versions prior to 2.16.1.-git, update to...

4.8CVSS3.8AI score0.00348EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/09/10 12:00 a.m.8 views

iCMS Code Issues Vulnerabilities

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A code issue vulnerability exists in iCMS versions prior to 2.16.1-git, which stems from a server-side request forgery SSRF vulnerability...

5.4CVSS7.1AI score0.00317EPSS
SaveExploits1References3
GithubExploit
GithubExploit
added 2023/09/07 10:07 a.m.1043 views

Exploit for Path Traversal in Git-Scm Git

CVE-2023-23946 POC Exploit Explanation and POC of the CVE-2023...

7.5CVSS7.1AI score0.01144EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:00 a.m.25 views

Oracle Linux 6 / 7 : git19-git (ELSA-2015-2515)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2515 advisory. 1.9.4-3.1 - fix arbitrary code execution via crafted URLs Resolves: 1273889 1.9.4-3 - fix CVE-2014-9390 Resolves: rhbz1220552 Tenable has extracted the...

9.8CVSS9AI score0.75041EPSS
SaveExploits5References2
Github Security Blog
Github Security Blog
added 2023/09/05 12:30 p.m.37 views

Salt can cause Git Providers to get wrong data

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.6AI score0.00288EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/09/05 12:30 p.m.24 views

GHSA-QVH6-3J7X-3HQ7 Salt can cause Git Providers to get wrong data

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS5.6AI score0.00288EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2023/09/05 11:15 a.m.87 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00288EPSS
SaveExploits0
NVD
NVD
added 2023/09/05 11:15 a.m.21 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.7AI score0.00288EPSS
SaveExploits0References2
PyPA
PyPA
added 2023/09/05 11:15 a.m.11 views

PYSEC-2023-169

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7AI score0.00288EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/09/05 11:15 a.m.32 views

Design/Logic Flaw

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

3.5CVSS7.5AI score0.00288EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/09/05 11:15 a.m.31 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00288EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/05 11:15 a.m.24 views

PYSEC-2023-169

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.2AI score0.00288EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/05 11:15 a.m.8 views

UBUNTU-CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.8AI score0.00288EPSS
SaveExploits0References3
CVE
CVE
added 2023/09/05 10:59 a.m.386 views

CVE-2023-20898

CVE-2023-20898 affects SaltStack Salt masters prior to 3005.2 or 3006.2. The issue arises when Git Providers with different environments read from the same cache directory base name, allowing garbage or incorrect data to be read, which can lead to data disclosure, wrongful executions, data corrup...

7.8CVSS5.7AI score0.00288EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/05 10:59 a.m.20 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS6.8AI score0.00288EPSS
SaveExploits0References2
OSV
OSV
added 2023/09/05 10:59 a.m.30 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS5.6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2023/09/05 10:59 a.m.50 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS7.8AI score0.00288EPSS
SaveExploits0References2
Rows per page
Query Builder