io.github.graphql-java:graphql-java-annotations (>=5.0.4, <=5.0.7), net.nemerosa.ontrack:ontrack-extension-git (>=experimental-pipeline-a6e0b79, <=3.34.17) +7 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (5.0)

com.graphql-java:graphql-java MAVEN version 5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.github.graphql-java:graphql-java-annotations =5.0.4, =experimental-pipeline-a6e0b79,...

ROS-20240730-06

A vulnerability in the Git distributed version control system is related to the ability to create the folder "C:.git." Exploitation of the vulnerability could allow an attacker to run arbitrary commands...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

PoC exploit for CVE-2024-32002, a remote code execution vulnerab...

Gogs Command Execution

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands...

ROS-20240729-05

Vulnerability in the libssh2 library of Libgit2's implementation of Git's C methods is related to validation bugs of cryptographic signatures. Exploitation of the vulnerability could allow an attacker acting remotely, execute a man-in-the-middle attack...

Nomad Go-getter Orchestrator Command Injection

The vulnerability of the Nomad application’s Go-getter orchestrator library relates to the improper elimination of argument separators in commands. Exploiting this vulnerability allows a malicious actor to format the Git URL remotely, thereby introducing additional Git arguments during the Git...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002: Exploiting Git RCE via git clone This repos...

SUSE SLES15: git / git-arch / git-core / git-cvs / git-daemon / git-doc / etc (SUSE-SU-2024:2599-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2599-1 advisory. - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in gitindexadd bsc1219660 Tenable has extracted the preceding...

USN-6793-1: Git vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that Git incorrectly handled certain submodules. An attacker could possibly use this issue to execute arbitrary code. This issue was fixed in Ubuntu 22.04 LTS, Ubuntu 23.10 and Ubuntu...

PT-2024-6167 · Unknown +2 · Soft Serve +2

Name of the Vulnerable Software and Affected Versions: Soft Serve versions prior to 0.7.5 Description: The issue is related to Soft Serve passing all environment variables given by the client to git subprocesses, including variables that control program execution, such as LD PRELOAD. This can be...

Photon OS 4.0: Git PHSA-2023-4.0-0426

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0426. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20426...

Photon OS 3.0: Git PHSA-2022-3.0-0486

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0486. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20398...

Photon OS 4.0: Git PHSA-2024-4.0-0611

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0611. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20444...

SUSE: Security Advisory (SUSE-SU-2024:2599-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 5.0: Git PHSA-2024-5.0-0271

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0271. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20453...

Photon OS 3.0: Git PHSA-2023-3.0-0526

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0526. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20373...

SUSE-SU-2024:2599-1 Security update for git

This update for git fixes the following issues: - CVE-2024-24577: Fixed arbitrary code execution due to heap corruption in gitindexadd bsc1219660...

Photon OS 4.0: Git PHSA-2023-4.0-0327

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0327. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20335...

Photon OS 4.0: Git PHSA-2022-4.0-0271

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0271. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20324...

Photon OS 4.0: Git PHSA-2022-4.0-0220

An update of the git package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0220. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid20334...