Lucene search
K

9928 matches found

0day.today
0day.today
added 2013/03/19 12:0 a.m.41 views

ViewGit 0.0.6 - Multiple XSS Vulnerabilities

ViewGit "is a git web repository viewer that aims to be easy to set up and upgrade, light on dependencies, and comfortable to use." http://viewgit.fealdia.org/. ViewGit contains multiple persistent arbitrary script injection XSS vulnerabilities in its "Shortlog" and "Heads" tables. These...

3.7CVSS6.5AI score0.04742EPSS
Exploits6
OpenVAS
OpenVAS
added 2013/03/12 12:0 a.m.29 views

CentOS Update for emacs-git CESA-2013:0589 centos6

Check for the Version of emacs-git OpenVAS Vulnerability Test CentOS Update for emacs-git CESA-2013:0589 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

4.3CVSS9.5AI score0.01488EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/03/12 12:0 a.m.26 views

CentOS Update for emacs-git CESA-2013:0589 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS5.2AI score0.01488EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/10 12:0 a.m.26 views

CentOS 6 : git (CESA-2013:0589)

Updated git packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

4.3CVSS5.5AI score0.01488EPSS
Exploits0References3
NVD
NVD
added 2013/03/08 9:55 p.m.16 views

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

4.3CVSS6.4AI score0.01488EPSS
Exploits0References17
Prion
Prion
added 2013/03/08 9:55 p.m.21 views

Command injection

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

4.3CVSS6.9AI score0.01488EPSS
Exploits0References17Affected Software1
UbuntuCve
UbuntuCve
added 2013/03/08 9:55 p.m.20 views

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

4.3CVSS6AI score0.01488EPSS
Exploits0References2
Cvelist
Cvelist
added 2013/03/08 9:0 p.m.14 views

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

9.2AI score0.01488EPSS
Exploits0References17
CVE
CVE
added 2013/03/08 9:0 p.m.76 views

CVE-2013-0308

CVE-2013-0308 affects the git tool’s imap-send command: prior to version 1.8.1.4, it does not verify that the SSL server hostname matches the certificate’s CN/subjectAltName, enabling MITM spoofing with any valid cert. Affected releases include git versions before 1.8.1.4; multiple advisories (e....

4.3CVSS9AI score0.01488EPSS
Exploits0References17Affected Software1
Debian CVE
Debian CVE
added 2013/03/08 9:0 p.m.30 views

CVE-2013-0308

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

4.3CVSS6.4AI score0.01488EPSS
Exploits0
OpenVAS
OpenVAS
added 2013/03/05 12:0 a.m.29 views

RedHat Update for git RHSA-2013:0589-01

Check for the Version of git OpenVAS Vulnerability Test RedHat Update for git RHSA-2013:0589-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

4.3CVSS9.5AI score0.01488EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/03/05 12:0 a.m.21 views

Fedora Update for git FEDORA-2013-2763

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS9.5AI score0.01488EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2013/03/05 12:0 a.m.22 views

RHEL 6 : git (RHSA-2013:0589)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:0589 advisory. Git is a fast, scalable, distributed revision control system. It was discovered that Git's git-imap-send command, a tool to send a collection of...

4.3CVSS5.7AI score0.01488EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2013/03/05 12:0 a.m.23 views

Scientific Linux Security Update : git on SL6.x i386/x86_64 (20130304)

It was discovered that Git's git-imap-send command, a tool to send a collection of patches from standard input stdin to an IMAP folder, did not properly perform SSL X.509 v3 certificate validation on the IMAP server's certificate, as it did not ensure that the server's hostname matched the one...

4.3CVSS5.5AI score0.01488EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/03/05 12:0 a.m.21 views

Fedora Update for git FEDORA-2013-2829

Check for the Version of git OpenVAS Vulnerability Test Fedora Update for git FEDORA-2013-2829 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

4.3CVSS9.5AI score0.01488EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/03/05 12:0 a.m.29 views

RedHat Update for git RHSA-2013:0589-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS9.5AI score0.01488EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/03/05 12:0 a.m.23 views

Fedora Update for git FEDORA-2013-2829

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

4.3CVSS9.5AI score0.01488EPSS
Exploits0References2
Cent OS
Cent OS
added 2013/03/04 10:46 p.m.76 views

emacs, git, gitk, gitweb, perl security update

CentOS Errata and Security Advisory CESA-2013:0589 Updated git packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

4.3CVSS5.8AI score0.01488EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2013/03/04 9:2 p.m.2 views

git: Incorrect IMAP server's SSL x509.v3 certificate validation in git-imap-send command

The imap-send command in GIT before 1.8.1.4 does not verify that the server hostname matches a domain name in the subject's Common Name CN or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate...

4.3CVSS5.9AI score0.01488EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2013/03/04 9:2 p.m.24 views

Moderate: Red Hat Security Advisory: git security update

Updated git packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

4.3CVSS5.8AI score0.01488EPSS
Exploits0References2
Rows per page
Query Builder