15927 matches found
DLA-3239-2 git - regression update
Bulletin has no description...
Jenkins Git Client Plugin SSH Host Key Verification Man-in-the-Middle
The vulnerability of the SSH Host Key Verification component in the Jenkins Git Client Plugin is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute a “man-in-the-middle” attack remotely...
Jenkins Git Plugin Webhook Endpoint Information Disclosure
The vulnerability of the Webhook Endpoint component of the Jenkins Git Plugin relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Debian: Security Advisory (DLA-3239-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3239-1] git security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3239-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 13, 2022 https://wiki.debian.org/LTS -...
DLA-3239-1 git - security update
Bulletin has no description...
1508-cli (>=1.0.4, <=1.0.6), 40banner (>=1.0.0, <=1.1.2) +4573 more potentially affected by CVE-2022-25912 via simple-git (>=0.1.2, <=3.14.1)
simple-git NPM version =0.1.2, =1.0.4, =1.0.0, =0.0.80, =1.0.0, =2.0.0, =0.0.0, =0.0.1, =0.0.1, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.1.16 and more Source cves: CVE-2022-25912 Source advisory: MEND:CVE-2022-25912...
CVE-2022-25912 Remote Code Execution (RCE)
The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...
CVE-2022-25912
CVE-2022-25912 affects the Node.js simple-git module prior to 3.16.0, with remote code execution via the ext transport protocol during clone() (incomplete fix of CVE-2022-24066). Several connected sources corroborate RCE via clone()/pull()/push()/listRemote() paths when input is crafted, with exp...
CVE-2022-24439
All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...
CVE-2022-25912 Remote Code Execution (RCE)
The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...
CVE-2022-25912
The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of "CVE-2022-24066" https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-2434306...
CVE-2022-25912: Improper Neutralization of Special Elements used in an OS Command
The package simple-git before 3.15.0 are vulnerable to Remote Code Execution RCE when enabling the ext transport protocol, which makes it exploitable via clone method. This vulnerability exists due to an incomplete fix of CVE-2022-24066...
CVE-2022-24439: Improper Input Validation
All versions of package gitpython are vulnerable to Remote Code Execution RCE due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clone command. Exploiting this vulnerability is possible because the library makes external calls to git...
Remote Code Execution (RCE)
GitPython is vulnerable to Remote Code Execution RCE. The vulnerability exists because the clonefrom function in base.py makes external calls to git without sufficient sanitization of input arguments, allowing an attacker to inject and execute a maliciously crafted remote URL into the clone comma...
Amazon Linux 2022 : git (ALAS2022-2022-236)
The version of git installed on the remote host is prior to 2.37.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-236 advisory. - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on...
Amazon Linux AMI : git (ALAS-2022-1653)
The version of git installed on the remote host is prior to 2.38.1-1.77. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1653 advisory. Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5,...
Amazon Linux 2022 : git (ALAS2022-2022-254)
The version of git installed on the remote host is prior to 2.38.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-254 advisory. - Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5,...
Remote Code Execution (RCE)
simple-git is vulnerable to remote code execution.The vulnerability exists in the clone function of git.js because of enabling the ext transport protocol which allows an attacker to inject and execute arbitrary codes into the system. This is an incomplete fix of CVE-2022-24066...