Lucene search
+L

15344 matches found

Github Security Blog
Github Security Blog
•added 2024/03/13 12:31 p.m.•32 views

In Quarkus, git credentials could be inadvertently published

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS6.8AI score0.006EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2024/03/13 10:15 a.m.•32 views

CVE-2024-1979

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS3.8AI score0.006EPSS
SaveExploits0References4
Prion
Prion
•added 2024/03/13 10:15 a.m.•31 views

Buffer overflow

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

2.1CVSS4.1AI score0.006EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/03/13 9:41 a.m.•46 views

CVE-2024-1979 Quarkus: information leak in annotation

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS4.2AI score0.006EPSS
SaveExploits0References4
Mend
Mend
•added 2024/03/13 9:41 a.m.•8 views

CVE-2024-1979

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS0.006EPSS
SaveExploits0References11
osv_cve
osv_cve
•added 2024/03/13 9:41 a.m.•19 views

CVE-2024-1979 Quarkus: information leak in annotation

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS5.9AI score
SaveExploits0References8
CVE
CVE
•added 2024/03/13 9:41 a.m.•222 views

CVE-2024-1979

CVE-2024-1979 affects Quarkus with an information leak in the quarkus-kubernetes-deployment component related to annotation handling. The Red Hat advisory RHSA-2024:1662 lists CVE-2024-1979 as a security fix affecting the Red Hat build of Quarkus, specifically noting a security update for Quarkus...

3.5CVSS4.1AI score0.006EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/13 12:00 a.m.•10 views

CVE-2024-1979: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk...

3.5CVSS5.8AI score0.006EPSS
SaveExploits0References2
Redos
Redos
•added 2024/03/13 12:00 a.m.•40 views

ROS-2-804

2.804 Vulnerability in Git CVE-2020-11008, CVE-2020-5260 1. Vulnerability Description: Vulnerability in Git. The vulnerability affects the "credential.helper" handlers and is exploited when a specially crafted URL containing a newline character, an empty host, or an unspecified request scheme is...

7.5CVSS7AI score0.09966EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•45 views

EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-1335)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the...

7.5CVSS7AI score0.01208EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•48 views

EulerOS 2.0 SP10 : gdb (EulerOS-SA-2024-1311)

According to the versions of the gdb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - GNU gdb GDB 13.0.50.20220805-git was discovered to contain a heap buffer overflow via the function peas16 at /gdb/coff-pe-read.c. CVE-2023-39130 No...

5.5CVSS6.1AI score0.00245EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•50 views

EulerOS 2.0 SP11 : golang (EulerOS-SA-2024-1236)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the...

7.5CVSS7AI score0.01208EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•40 views

EulerOS 2.0 SP10 : golang (EulerOS-SA-2024-1313)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the...

7.5CVSS7AI score0.01208EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2024/03/12 12:00 a.m.•37 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1214)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.01208EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/12 12:00 a.m.•34 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2024-1236)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.01208EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/08 12:00 a.m.•35 views

Fedora: Security Advisory for jgit (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02352EPSS
SaveExploits3References2
Fedora
Fedora
•added 2024/03/07 10:33 p.m.•25 views

[SECURITY] Fedora 40 Update: jgit-6.1.0-9.fc40

A pure Java implementation of the Git version control system and command line interface...

8.8CVSS7AI score0.02352EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2024/03/07 12:00 a.m.•50 views

Oracle Linux 9 : golang (ELSA-2024-1131)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1131 advisory. 1.20.12-1 - Rebase to 1.20.12 - Fix CVE-2023-45285 CVE-2023-39326 Tenable has extracted the preceding description block directly from the Oracle Linux...

7.5CVSS7.2AI score0.01208EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/03/07 12:00 a.m.•36 views

AlmaLinux 9 : golang (ALSA-2024:1131)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:1131 advisory. - A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network th...

7.5CVSS7.1AI score0.01208EPSS
SaveExploits0References3
osv_bit
osv_bit
•added 2024/03/06 11:22 a.m.•38 views

BIT-GITLAB-2020-13286

For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery...

6.4CVSS5.1AI score0.00869EPSS
SaveExploits0References4
Rows per page
Query Builder