15404 matches found
Command injection in Git package in Wrangler
Impact A command injection vulnerability was discovered in Wrangler's Git package affecting versions up to and including v1.0.0. Wrangler's Git package uses the underlying Git binary present in the host OS or container image to execute Git operations. Specially crafted commands can be passed to...
GHSA-QRG7-HFX7-95C5 Command injection in Git package in Wrangler
Impact A command injection vulnerability was discovered in Wrangler's Git package affecting versions up to and including v1.0.0. Wrangler's Git package uses the underlying Git binary present in the host OS or container image to execute Git operations. Specially crafted commands can be passed to...
GHSA-8FCJ-GF77-47MG Denial of service (DoS) when processing Git credentials
Impact A denial of services DoS vulnerability was discovered in Wrangler Git package affecting versions up to and including v1.0.0. Specially crafted Git credentials can result in a denial of service DoS attack on an application that uses Wrangler due to the exhaustion of the available memory and...
Denial of service (DoS) when processing Git credentials
Impact A denial of services DoS vulnerability was discovered in Wrangler Git package affecting versions up to and including v1.0.0. Specially crafted Git credentials can result in a denial of service DoS attack on an application that uses Wrangler due to the exhaustion of the available memory and...
Command injection in Rancher Git package
Impact An issue was discovered in Rancher from versions 2.5.0 up to and including 2.5.16, 2.6.0 up to and including 2.6.9 and 2.7.0, where a command injection vulnerability is present in the Rancher Git package. This package uses the underlying Git binary available in the Rancher container image ...
GHSA-34P5-JP77-FCRC Command injection in Rancher Git package
Impact An issue was discovered in Rancher from versions 2.5.0 up to and including 2.5.16, 2.6.0 up to and including 2.6.9 and 2.7.0, where a command injection vulnerability is present in the Rancher Git package. This package uses the underlying Git binary available in the Rancher container image ...
PT-2023-14312 · Suse · Suse Rancher Wrangler
Name of the Vulnerable Software and Affected Versions: SUSE Rancher wrangler versions 0.7.3 and prior versions SUSE Rancher wrangler versions 0.8.4 and prior versions SUSE Rancher wrangler versions 1.0.0 and prior versions Description: A denial of service vulnerability exists in the Wrangler Git...
PT-2023-35773 · Git +1 · Libzip
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. The crash state...
PT-2023-1492 · Suse · Suse Rancher Wrangler
Name of the Vulnerable Software and Affected Versions: SUSE Rancher wrangler versions 0.7.3 and prior versions SUSE Rancher wrangler versions 0.8.4 and prior versions SUSE Rancher wrangler versions 1.0.0 and prior versions Description: A command injection vulnerability exists in the Wrangler Git...
CVE-2022-25860
Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution RCE via the clone, pull, push and listRemote methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of CVE-2022-25912...
CVE-2022-25860
The CVE-2022-25860 entry concerns the simple-git package. Versions before 3.16.0 are vulnerable to Remote Code Execution via clone(), pull(), push(), and listRemote() due to improper input sanitization, tied to an incomplete fix of CVE-2022-25912. CERT/OSV/NVD/IBM/Red Hat references confirm the i...
CVE-2022-25860
Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution RCE via the clone, pull, push and listRemote methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of "CVE-2022-25912"...
CVE-2022-25860
Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution RCE via the clone, pull, push and listRemote methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of CVE-2022-25912...
CVE-2022-25860
Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution RCE via the clone, pull, push and listRemote methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of CVE-2022-25912...
1508-cli (>=1.0.4, <=1.0.6), 40banner (>=1.0.0, <=1.1.2) +4594 more potentially affected by CVE-2022-25860 via simple-git (>=0.1.2, <=3.15.1)
simple-git NPM version =0.1.2, =1.0.4, =1.0.0, =0.0.80, =1.0.0, =2.0.0, =0.0.0, =0.0.1, =0.0.1, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.0.5, =0.1.16 and more Source cves: CVE-2022-25860 Source advisory: MEND:CVE-2022-25860...
CVE-2022-25860: Improper Control of Generation of Code
Versions of the package simple-git before 3.16.0 are vulnerable to Remote Code Execution RCE via the clone, pull, push and listRemote methods, due to improper input sanitization. This vulnerability exists due to an incomplete fix of CVE-2022-25912...
PT-2023-12824
Name of the Vulnerable Software and Affected Versions simple-git versions prior to 3.16.0 Description The issue is related to Remote Code Execution RCE due to improper input sanitization in the clone, pull, push, and listRemote methods. This vulnerability exists because of an incomplete fix of a...
Debian dla-3277 : powerline-gitstatus - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3277 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3277-1 [email protected] https://www.debian.org/lts/security/...
CVE-2022-3740
An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.9 prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2. A group owner may be able to bypass External Authorization check, if it is enabled, to access git repositories and package registries by using...
