Lucene search
+L

12455 matches found

SUSE CVE
SUSE CVE
•added 2026/07/30 4:42 p.m.•12 views

SUSE CVE-2026-52804

Gogs is an open source self-hosted Git service. Prior to 0.14.3, a repository admin collaborator can escalate their privileges to owner-level access by exploiting an off-by-one error in the ChangeCollaborationAccessMode function. This vulnerability is fixed in 0.14.3...

7CVSS7.6AI score0.00499EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/07/30 4:42 p.m.•16 views

SUSE CVE-2026-52806

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution RCE on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before...

9.9CVSS7.9AI score0.07934EPSS
SaveExploits2References2
SUSE CVE
SUSE CVE
•added 2026/07/30 4:42 p.m.•15 views

SUSE CVE-2026-52810

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Git smart HTTP authorizes POST .../git-receive-pack using the client-supplied service query string so ?service=git-upload-pack is evaluated as read access while routing still runs git receive-pack, allowing push where only read shou...

7.1CVSS7.7AI score0.00427EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/07/30 4:42 p.m.•12 views

SUSE CVE-2026-52814

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs built-in Go SSH server is vulnerable to an unauthenticated, asymmetric Denial of Service DoS attack. The application accepts inbound TCP connections and passes them to golang.org/x/crypto/ssh.NewServerConn inside a new...

6.9CVSS7.6AI score0.00547EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/30 7:10 a.m.•12 views

CLEANSTART-2026-YO09216 Security fixes in git-lfs 3.1.2-r4

Package git-lfs version 3.1.2-r4 fixes 1 vulnerabilities: CVE-2022-27191...

7.5CVSS6.8AI score0.03931EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/30 7:10 a.m.•12 views

CLEANSTART-2026-CS42741 Security fixes in git-lfs 3.7.0-r1

Package git-lfs version 3.7.0-r1 fixes 3 vulnerabilities: CVE-2025-68121, CVE-2025-61732, CVE-2022-3219...

10CVSS6.6AI score0.00856EPSS
SaveExploits1References1
OSV
OSV
•added 2026/07/30 7:10 a.m.•11 views

CLEANSTART-2026-RJ61585 Security fixes in git-sync 4.5.1-r1

Package git-sync version 4.5.1-r1 fixes 10 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2025-61726, CVE-2025-61728, CVE-2025-68119...

10CVSS6.8AI score0.02326EPSS
SaveExploits2References1
OSV
OSV
•added 2026/07/30 7:10 a.m.•17 views

CLEANSTART-2026-QB92274 Security fixes in git-lfs 3.7.0-r3

Package git-lfs version 3.7.0-r3 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-27137, CVE-2026-25679, CVE-2026-27138...

7.5CVSS6.8AI score0.00803EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/30 7:10 a.m.•15 views

CLEANSTART-2026-XM62269 Security fixes in git-lfs-fips 3.7.0-r2

Package git-lfs-fips version 3.7.0-r2 fixes 11 vulnerabilities: CVE-2025-47911, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-61730...

10CVSS6.7AI score0.02326EPSS
SaveExploits4References1
OSV
OSV
•added 2026/07/30 7:10 a.m.•9 views

CLEANSTART-2026-QQ25603 Security fixes in git-lfs 3.1.2-r3

Package git-lfs version 3.1.2-r3 fixes 1 vulnerabilities: CVE-2021-38561...

7.5CVSS7.2AI score0.01367EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2026/07/30 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

7.5CVSS7.2AI score0.06878EPSS
SaveIn wildExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/30 12:00 a.m.•14 views

Fedora 44 : pack (2026-8729dce4b8)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-8729dce4b8 advisory. Security update to pack 0.40.8 Fixes CVE-2024-25621: containerd - local privilege escalation Fixes CVE-2025-47913: golang.org/x/crypto/ssh/agent - S...

9.1CVSS7.3AI score0.00716EPSS
SaveExploits3References15
CBLMariner
CBLMariner
•added 2026/07/29 8:30 p.m.•12 views

CVE-2026-56852 affecting package git-lfs for versions less than 3.6.1-5

CVE-2026-56852 affecting package git-lfs for versions less than 3.6.1-5. A patched version of the package is available...

7.5CVSS5.8AI score0.00475EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/29 9:51 a.m.•61 views

Exploit for OS Command Injection in Openhands

CVE-2026-33718 OpenHands is Vulnerable to Command Injection t...

9.9CVSS7.3AI score0.04028EPSS
SaveExploits30
SUSE Linux
SUSE Linux
•added 2026/07/28 10:03 a.m.•17 views

Security update for apache-sshd

This update for apache-sshd fixes the following issues: Update to upstream version 2.19.0. Security issues fixed: CVE-2026-56452: remote users can use SCP to send filenames that lead to arbitrary file writes due to a path traversal issue in the sshd-scp component of Apache MINA SSHD. bsc1272158...

7.5CVSS6.3AI score0.00871EPSS
SaveExploits0References16
OSV
OSV
•added 2026/07/28 10:03 a.m.•10 views

SUSE-SU-2026:3339-1 Security update for apache-sshd

This update for apache-sshd fixes the following issues: Update to upstream version 2.19.0. Security issues fixed: - CVE-2026-56452: remote users can use SCP to send filenames that lead to arbitrary file writes due to a path traversal issue in the sshd-scp component of Apache MINA SSHD. bsc1272158...

7.5CVSS6.2AI score0.00871EPSS
SaveExploits0References9
NVD
NVD
•added 2026/07/27 8:16 p.m.•18 views

CVE-2026-56748

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

8.8CVSS0.00919EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/27 7:27 p.m.•44 views

CVE-2026-56748 Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

8.8CVSS0.00919EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/27 7:27 p.m.•11 views

CVE-2026-56748 Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview permissions to execute arbitrary code as the Cribl server process via a crafted Git repository containing a symbolic link...

8.8CVSS6.3AI score0.00919EPSS
SaveExploits0References2
OSV
OSV
•added 2026/07/27 3:30 p.m.•14 views

GO-2026-5116 Build breakout using malicious Containerfile or Git HTTP server in github.com/containers/buildah

Buildah allows a build-time breakout when using a malicious Containerfile or a malicious Git HTTP server. A crafted Git URL or Containerfile can cause Buildah to access files outside of the build context during an ADD or COPY operation...

6.3CVSS5.8AI score0.00184EPSS
SaveExploits0References1
Rows per page
Query Builder