Lucene search
+L

15355 matches found

CVE
CVE
•added 2023/09/12 9:12 a.m.•246 views

CVE-2023-4759

CVE-2023-4759 (Eclipse JGit) affects all versions

8.8CVSS7.6AI score0.02194EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2023/09/12 9:12 a.m.•29 views

CVE-2023-4759 Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS7.7AI score
SaveExploits0References6
Debian CVE
Debian CVE
•added 2023/09/12 9:12 a.m.•111 views

CVE-2023-4759

Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...

8.8CVSS7.5AI score0.02194EPSS
SaveExploits0
NVD
NVD
•added 2023/09/10 6:15 p.m.•26 views

CVE-2023-4878

Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

5.4CVSS4.9AI score0.00376EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/10 5:53 p.m.•48 views

CVE-2023-4879 Cross-site Scripting (XSS) - Stored in instantsoft/icms2

Cross-site Scripting XSS - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git...

3.5CVSS5.2AI score0.00402EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/10 5:49 p.m.•36 views

CVE-2023-4878 Server-Side Request Forgery (SSRF) in instantsoft/icms2

Server-Side Request Forgery SSRF in GitHub repository instantsoft/icms2 prior to 2.16.1-git...

4.3CVSS5.8AI score0.00376EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/09/10 12:00 a.m.•19 views

iCMS Code Issues Vulnerabilities

iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A code issue vulnerability exists in iCMS versions prior to 2.16.1-git, which stems from a server-side request forgery SSRF vulnerability...

5.4CVSS7.1AI score0.00376EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/09/10 12:00 a.m.•20 views

PT-2023-30961 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1.-git. Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository instantsoft/icms2. Recommendations: For versions prior to 2.16.1.-git, update to...

4.8CVSS3.8AI score0.00402EPSS
SaveExploits1References8
GithubExploit
GithubExploit
•added 2023/09/07 10:07 a.m.•1067 views

Exploit for Path Traversal in Git-Scm Git

CVE-2023-23946 POC Exploit Explanation and POC of the CVE-2023...

7.5CVSS6.9AI score0.01135EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
•added 2023/09/07 12:00 a.m.•38 views

Oracle Linux 6 / 7 : git19-git (ELSA-2015-2515)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2015-2515 advisory. 1.9.4-3.1 - fix arbitrary code execution via crafted URLs Resolves: 1273889 1.9.4-3 - fix CVE-2014-9390 Resolves: rhbz1220552 Tenable has extracted the...

9.8CVSS9AI score0.75597EPSS
SaveExploits5References2
osv_ghsa
osv_ghsa
•added 2023/09/05 12:30 p.m.•37 views

GHSA-QVH6-3J7X-3HQ7 Salt can cause Git Providers to get wrong data

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

4.2CVSS5.6AI score0.00318EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2023/09/05 12:30 p.m.•50 views

Salt can cause Git Providers to get wrong data

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.6AI score0.00318EPSS
SaveExploits0References5Affected Software1
AlpineLinux
AlpineLinux
•added 2023/09/05 11:15 a.m.•99 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00318EPSS
SaveExploits0
NVD
NVD
•added 2023/09/05 11:15 a.m.•28 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.7AI score0.00318EPSS
SaveExploits0References2
osv_pysec
osv_pysec
•added 2023/09/05 11:15 a.m.•37 views

PYSEC-2023-169

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.2AI score0.00318EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2023/09/05 11:15 a.m.•37 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7.1AI score0.00318EPSS
SaveExploits0References2
Prion
Prion
•added 2023/09/05 11:15 a.m.•38 views

Design/Logic Flaw

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

3.5CVSS7.5AI score0.00318EPSS
SaveExploits0References2Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/09/05 11:15 a.m.•17 views

UBUNTU-CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS5.8AI score0.00318EPSS
SaveExploits0References3
PyPA
PyPA
•added 2023/09/05 11:15 a.m.•26 views

PYSEC-2023-169

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS7AI score0.00318EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2023/09/05 10:59 a.m.•4 views

CVE-2023-20898

Git Providers can read from the wrong environment because they get the same cache directory base name in Salt masters prior to 3005.2 or 3006.2. Anything that uses Git Providers with different environments can get garbage data or the wrong data, which can lead to wrongful data disclosure, wrongfu...

7.8CVSS0.00318EPSS
SaveExploits0References9
Rows per page
Query Builder