Lucene search
+L

11495 matches found

OSV
OSV
added 2018/10/15 12:58 p.m.11 views

SUSE-SU-2018:3150-1 Security update for git

This update for git fixes the following issues: - CVE-2018-17456: Git allowed remote code execution during processing of a recursive 'git clone' of a superproject if a .gitmodules file has a URL field beginning with a '-' character. boo1110949...

9.8CVSS9.8AI score0.97356EPSS
SaveExploits12References3
Cloud Foundry
Cloud Foundry
added 2018/10/15 12:00 a.m.540 views

USN-3791-1: Git vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 18.04 Description It was discovered that git did not properly validate git submodule urls or paths. A remote attacker could possibly use this to craft a git repository that causes arbitrary code...

9.8CVSS9.4AI score0.97356EPSS
SaveExploits12
Tenable Nessus
Tenable Nessus
added 2018/10/15 12:00 a.m.39 views

openSUSE Security Update : git (openSUSE-2018-1147)

This update for git fixes the following issues : - CVE-2018-17456: Git allowed remote code execution during processing of a recursive 'git clone' of a superproject if a .gitmodules file has a URL field beginning with a '-' character. boo1110949. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

9.8CVSS7.6AI score0.97356EPSS
SaveExploits12References2
Fedora
Fedora
added 2018/10/14 11:31 p.m.50 views

[SECURITY] Fedora 27 Update: libgit2-0.26.7-1.fc27

libgit2 is a portable, pure C implementation of the Git core methods provided as a re-entrant linkable library with a solid API, allowing you to write native speed custom Git applications in any language with bindings...

9.8CVSS2.4AI score0.97356EPSS
SaveExploits20
Kitploit
Kitploit
added 2018/10/14 12:33 p.m.106 views

Quasar - An Information Gathering Framework For Lazy Penetration Testers

Quasar Is An Information Gathering Framework For Penetration Testers Coded By Belahsan Ouerghi: Website Informations E-mail Address Checker Phone Number Information Credit Card Bin Checker Ip Locator Port Scanner Installation sudo apt-get install git git clone...

7.3AI score
SaveExploits0References2
OSV
OSV
added 2018/10/14 12:58 a.m.13 views

MGASA-2018-0395 Updated git packages fix security vulnerability

joernchen of Phenoelit discovered that git is prone to an arbitrary code execution vulnerability due to insufficient validation of submodule url and path via a specially crafted .gitmodules file in a project cloned with --recurse-submodules CVE-2018-17456...

9.8CVSS9.3AI score0.97356EPSS
SaveExploits12References2
Mageia
Mageia
added 2018/10/14 12:58 a.m.47 views

Updated git packages fix security vulnerability

joernchen of Phenoelit discovered that git is prone to an arbitrary code execution vulnerability due to insufficient validation of submodule url and path via a specially crafted .gitmodules file in a project cloned with --recurse-submodules CVE-2018-17456...

9.8CVSS3.3AI score0.97356EPSS
SaveExploits12References1
OpenVAS
OpenVAS
added 2018/10/13 12:00 a.m.25 views

openSUSE: Security Advisory for git (openSUSE-SU-2018:3109-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.7AI score0.97356EPSS
SaveExploits12References2
OPENSUSE Linux
OPENSUSE Linux
added 2018/10/12 12:11 p.m.96 views

Security update for git (important)

This update for git fixes the following issues: - CVE-2018-17456: Git allowed remote code execution during processing of a recursive "git clone" of a superproject if a .gitmodules file has a URL field beginning with a '-' character. boo1110949...

4.7AI score0.97356EPSS
SaveExploits12References1
OSV
OSV
added 2018/10/12 12:41 a.m.12 views

USN-3791-1 git vulnerability

It was discovered that git did not properly validate git submodule urls or paths. A remote attacker could possibly use this to craft a git repository that causes arbitrary code execution when recursive operations are used...

9.8CVSS7.3AI score0.97356EPSS
SaveExploits12References2
Ubuntu
Ubuntu
added 2018/10/12 12:41 a.m.383 views

USN-3791-1: Git vulnerability

It was discovered that git did not properly validate git submodule urls or paths. A remote attacker could possibly use this to craft a git repository that causes arbitrary code execution when recursive operations are used...

9.8CVSS7.9AI score0.97356EPSS
SaveExploits12
OpenVAS
OpenVAS
added 2018/10/12 12:00 a.m.35 views

Ubuntu: Security Advisory (USN-3791-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.9AI score0.97356EPSS
SaveExploits12References2
Tenable Nessus
Tenable Nessus
added 2018/10/12 12:00 a.m.34 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Git vulnerability (USN-3791-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3791-1 advisory. It was discovered that git did not properly validate git submodule urls or paths. A remote attacker could possibly use this to craft a git...

9.8CVSS7.8AI score0.97356EPSS
SaveExploits12References2
Slackware Linux
Slackware Linux
added 2018/10/11 12:35 a.m.83 views

[slackware-security] git

New git packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/git-2.14.5-i586-1slack14.2.txz: Upgraded. This update fixes a security issue: Submodules' "URL"s come from the untrusted...

9.8CVSS0.1AI score0.97356EPSS
SaveExploits12
OpenVAS
OpenVAS
added 2018/10/11 12:00 a.m.43 views

Fedora Update for git FEDORA-2018-1c1a318a0b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.97356EPSS
SaveExploits12References2
Tenable Nessus
Tenable Nessus
added 2018/10/11 12:00 a.m.34 views

Slackware 14.0 / 14.1 / 14.2 / current : git (SSA:2018-283-01)

New git packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-283-01. The text itself is copyright C Slackware Linux,...

9.8CVSS7.4AI score0.97356EPSS
SaveExploits12References2
Fedora
Fedora
added 2018/10/10 10:47 p.m.50 views

[SECURITY] Fedora 28 Update: git-2.17.2-1.fc28

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. The git rpm installs common set of tools which are usually using with small amount of dependencies. To install all git packages,...

9.8CVSS2.4AI score0.97356EPSS
SaveExploits20
ArchLinux
ArchLinux
added 2018/10/09 12:00 a.m.46 views

[ASA-201810-7] git: arbitrary code execution

Arch Linux Security Advisory ASA-201810-7 ========================================= Severity: High Date : 2018-10-09 CVE-ID : CVE-2018-17456 Package : git Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-776 Summary ======= The package git before version...

9.8CVSS0.9AI score0.97356EPSS
SaveExploits12References6
Tenable Nessus
Tenable Nessus
added 2018/10/09 12:00 a.m.40 views

Debian DSA-4311-1 : git - security update

joernchen of Phenoelit discovered that git, a fast, scalable, distributed revision control system, is prone to an arbitrary code execution vulnerability via a specially crafted .gitmodules file in a project cloned with --recurse-submodules. C Tenable Network Security, Inc. The descriptive text an...

9.8CVSS7.1AI score0.97356EPSS
SaveExploits12References4
CNVD
CNVD
added 2018/10/09 12:00 a.m.7 views

Git Submodule Arbitrary Code Execution Vulnerability

Git is an open source distributed version control system A security vulnerability in the handling of the '-' character in the Git Submodule allows remote attackers to exploit the vulnerability by submitting a special request that can execute arbitrary code...

9.8CVSS7.7AI score0.97356EPSS
SaveExploits12References1
Rows per page
Query Builder