11319 matches found
GHSA-49CW-434H-QC57 Mercurial vulnerable to arbitrary code execution when converting Git repos
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name...
Mercurial vulnerable to arbitrary code execution when converting Git repos
The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repository name...
GHSA-RF5Q-8GX3-XQFC Cross-Site Request Forgery in Jenkins Git Plugin
Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenki...
Cross-Site Request Forgery in Jenkins Git Plugin
Git Plugin connects to a user-specified Git repository as part of form validation. An attacker with no direct access to Jenkins but able to guess at a username/password credentials ID could trick a developer with job configuration permissions into following a link with a maliciously crafted Jenki...
GHSA-Q2X6-8GFJ-HJXW salt leaks git usernames and passwords to the log
salt before 2015.5.5 leaks git usernames and passwords to the log...
GHSA-FCXW-HHXQ-48WX Insecure temporary file usage in Jenkins Git Client Plugin
Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure...
Insecure temporary file usage in Jenkins Git Client Plugin
Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure...
GHSA-P5F9-C9J9-G8QX Shell command injection in gitea
Gitea before 1.16.7 does not escape the shell out for git fetch remote allowing for shell command injection...
Shell command injection in gitea
Gitea before 1.16.7 does not escape the shell out for git fetch remote allowing for shell command injection...
openSUSE: Security Advisory for git (SUSE-SU-2022:1260-1)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
PT-2022-20401 · Jenkins · Jenkins Git Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Git Plugin versions 4.11.1 and earlier Description: The issue allows attackers who can configure pipelines to check out some SCM repositories stored on the Jenkins controller's file system using local paths as SCM URLs. This enables...
Jenkins Git Plugin 信息泄露漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.An information disclosure vulnerability...
Important Photon OS Security Update - PHSA-2022-4.0-0184
Updates of 'git' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2022-0184
Updates of 'git' packages of Photon OS have been released...
Malicious code in lbc-git (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d5e0e36aba3e23f480664cd7bebdb71156e08493ca3b9ff660474fdf2068b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4264 Malicious code in lbc-git (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d5e0e36aba3e23f480664cd7bebdb71156e08493ca3b9ff660474fdf2068b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-30781
Gitea before 1.16.7 does not escape git fetch remote...
Design/Logic Flaw
Gitea before 1.16.7 does not escape git fetch remote...
