11291 matches found
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-2559)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-3145-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
Observation To handle dependencies that come from a Git repository, Poetry executes various commands, e.g. git config. These commands are being executed using the executable’s name and not its absolute path. This can lead to the execution of untrusted code due to the way Windows resolves executab...
GHSA-J4J9-7HG9-97G6 Poetry vulnerable to Untrusted Search Path leading to Local Code Execution on Windows
Observation To handle dependencies that come from a Git repository, Poetry executes various commands, e.g. git config. These commands are being executed using the executable’s name and not its absolute path. This can lead to the execution of untrusted code due to the way Windows resolves executab...
DLA-3145-1 git - security update
Bulletin has no description...
[SECURITY] [DLA 3145-1] git security update
Debian LTS Advisory DLA-3145-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany October 11, 2022 https://wiki.debian.org/LTS Package : git Version : 1:2.20.1-2+deb10u4 CVE ID : CVE-2021-21300 CVE-2021-40330 Debian Bug : 985120 Several security vulnerabilities have...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-2500)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for git (EulerOS-SA-2022-2459)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.0 : git (EulerOS-SA-2022-2559)
According to the versions of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machine...
EulerOS Virtualization 3.0.6.6 : git (EulerOS-SA-2022-2500)
According to the versions of the git packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machine...
EulerOS 2.0 SP8 : git (EulerOS-SA-2022-2459)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerab...
Jenkins Enterprise and Operations Center 2.303.x < 2.303.30.0.15 / 2.346.2.3 Multiple Vulnerabilities (CloudBees Security Advisory 2022-07-27)
The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.303.x prior to 2.303.30.0.15, or 2.x prior to 2.346.2.3. It is, therefore, affected by multiple vulnerabilities, including the following: - A cross-site request forgery CSRF vulnerability in Jenki...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libgit2 (SUSE-SU-2022:3494-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3494-1 advisory. - CVE-2022-24765: Fixed potential command injection via git worktree bsc1198234. - CVE-2022-2918...
openSUSE: Security Advisory for libgit2 (SUSE-SU-2022:3495-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
SUSE SLES15 / openSUSE 15 Security Update : libgit2 (SUSE-SU-2022:3495-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3495-1 advisory. - Fixed DoS by oob write in constructed commit object with a very large number of parents bsc1158981. - CVE-2019-1352...
gitea -- multiple issues
The Gitea team reports: Sanitize and Escape refs in git backend Bump golang.org/x/text Update bluemonday...
OESA-2022-1934 rubygem-bundler security update
Security Fixes: Bundler is a package for managing application dependencies in Ruby. In bundler versions before 2.2.33, when working with untrusted and apparently harmless Gemfile's, it is not expected that they lead to execution of external code, unless that's explicit in the ruby code inside the...
Bitbucket Git Command Injection Exploit
Various versions of Bitbucket Server and Data Center are vulnerable to an unauthenticated command injection vulnerability in multiple API endpoints. The /rest/api/latest/projects/projectKey/repos/repositorySlug/archive endpoint creates an archive of the repository, leveraging the git-archive...
Bitbucket Git Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Bitbucket Git Command Injection', 'Description' = %q Various versions of Bitbucket Server and Data Center are vulnerable to an unauthenticated...
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libgit2 (SUSE-SU-2022:3283-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3283-1 advisory. - CVE-2022-24765: Fixed potential command injection via git worktree bsc1198234. - CVE-2022-2918...