Lucene search
K

10039 matches found

Fedora
Fedora
added 2013/06/05 3:16 a.m.17 views

[SECURITY] Fedora 19 Update: cgit-0.9.2-1.fc19

Cgit is a fast web interface for git. It uses caching to increase performa nce...

4.3CVSS1.6AI score0.00462EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2013/06/03 12:0 a.m.20 views

Fedora 18 : libXres-1.0.6-5.20130524gitf46818496.fc18 (2013-9141)

Update to latest git for CVE-2013-1988 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

6.8CVSS5.3AI score0.00826EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2013/05/28 12:0 a.m.16 views

Fedora 19 : libXcursor-1.1.13-5.20130524git8f677eaea.fc19 (2013-9096)

Update to latest git to fix the following CVEs: CVE-2013-2003 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

6.8CVSS8.1AI score0.00899EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2013/05/28 12:0 a.m.23 views

Fedora 19 : libXrandr-1.4.0-4.20130524gitc90f74497.fc19 (2013-9056)

Update to latest git to fix the following CVEs: CVE-2013-1986 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

6.8CVSS8.1AI score0.00904EPSS
Exploits0References3
Oracle linux
Oracle linux
added 2013/05/09 12:0 a.m.69 views

Unbreakable Enterprise kernel security and bugfix update

2.6.39-400.23.1 - Parallel mtrr init between cpus Zhenzhong Duan Orabug: 16777774 - Merge tag 'v2.6.39-400.21.1.16748891' of git://ca-git.us.oracle.com/linux-uek-2.6.39-ofed into uek-2.6.39-400 Maxim Uvarov Orabug: 16748891 - xen-blkfront: use a different scatterlist for each request Roger Pau...

6.8CVSS0.4AI score0.01068EPSS
Exploits5
n0where
n0where
added 2013/05/06 11:40 p.m.30 views

Raspberrypi Wireless Attack Toolkit

Raspberrypi Wireless Attack Toolkit is a push-button wireless hacking and Man-in-the-Middle attack toolkit This project is designed to run on Embedded ARM platforms specifically v6 and RaspberryPi . It provides users with automated wireless attack tools that air paired with man-in-the-middle tool...

Exploits0
0day.today
0day.today
added 2013/04/11 12:0 a.m.37 views

phpMyAdmin 3.5.7 Cross Site Scripting Vulnerability

phpMyAdmin version 3.5.7 suffers from a reflective cross site scripting vulnerability. Reflected XSS in phpMyAdmin 3.5.7 ==================================================== Author: Janek Vind "waraxe" Date: 09. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-102.html...

6.3AI score
Exploits0
Packet Storm
Packet Storm
added 2013/04/10 12:0 a.m.31 views

phpMyAdmin 3.5.7 Cross Site Scripting

waraxe-2013-SA102 - Reflected XSS in phpMyAdmin 3.5.7 =============================================================================== Author: Janek Vind "waraxe" Date: 09. April 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-102.html Description of vulnerable software: phpMyAdmi...

7.4AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2013/04/05 12:0 a.m.23 views

Git Protocol Detection

A Git daemon using the Git protocol is running on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid65822; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/04/11"...

7.1AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/27 12:0 a.m.1112 views

Git Repository Served by Web Server

The web server on the remote host allows read access to a Git repository. This potential flaw can be used to download content from the Web server that might otherwise be private. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

5.8AI score
Exploits0References2
Packet Storm
Packet Storm
added 2013/03/19 12:0 a.m.28 views

ViewGit 0.0.6 Cross Site Scripting

Vulnerability Report Author: Matthew R. Bucci Date: 18 March, 2013 CVE-2013-2294 Description of Vulnerability: ----------------------------- ViewGit "is a git web repository viewer that aims to be easy to set up and upgrade, light on dependencies, and comfortable to use."...

3.7CVSS0.3AI score0.04742EPSS
Exploits6
0day.today
0day.today
added 2013/03/19 12:0 a.m.41 views

ViewGit 0.0.6 - Multiple XSS Vulnerabilities

ViewGit "is a git web repository viewer that aims to be easy to set up and upgrade, light on dependencies, and comfortable to use." http://viewgit.fealdia.org/. ViewGit contains multiple persistent arbitrary script injection XSS vulnerabilities in its "Shortlog" and "Heads" tables. These...

3.7CVSS6.5AI score0.04742EPSS
Exploits6
OpenVAS
OpenVAS
added 2013/03/12 12:0 a.m.30 views

CentOS Update for emacs-git CESA-2013:0589 centos6

Check for the Version of emacs-git OpenVAS Vulnerability Test CentOS Update for emacs-git CESA-2013:0589 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4.3CVSS9.5AI score0.01488EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/03/12 12:0 a.m.26 views

CentOS Update for emacs-git CESA-2013:0589 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS5.2AI score0.01488EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/10 12:0 a.m.26 views

CentOS 6 : git (CESA-2013:0589)

Updated git packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

4.3CVSS5.5AI score0.01488EPSS
Exploits0References3
NVD
NVD
added 2013/03/08 9:55 p.m.16 views

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

4.3CVSS6.4AI score0.01488EPSS
Exploits0References17
Prion
Prion
added 2013/03/08 9:55 p.m.22 views

Command injection

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

4.3CVSS6.9AI score0.01488EPSS
Exploits0References17Affected Software1
UbuntuCve
UbuntuCve
added 2013/03/08 9:55 p.m.20 views

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

4.3CVSS6AI score0.01488EPSS
Exploits0References2
Cvelist
Cvelist
added 2013/03/08 9:0 p.m.14 views

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

9.2AI score0.01488EPSS
Exploits0References17
CVE
CVE
added 2013/03/08 9:0 p.m.76 views

CVE-2013-0308

CVE-2013-0308 affects the git tool’s imap-send command: prior to version 1.8.1.4, it does not verify that the SSL server hostname matches the certificate’s CN/subjectAltName, enabling MITM spoofing with any valid cert. Affected releases include git versions before 1.8.1.4; multiple advisories (e....

4.3CVSS9AI score0.01488EPSS
Exploits0References17Affected Software1
Rows per page
Query Builder