Lucene search
+L

1777 matches found

OSV
OSV
added 2022/05/03 3:25 a.m.39 views

GHSA-3P86-XGRQ-M6P6 Improper Neutralization of Input During Web Page Generation in Apache Tomcat

Multiple cross-site scripting XSS vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, and 7.0 before 7.0.6 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the display-name tag...

4.3CVSS5.5AI score0.10228EPSS
SaveExploits2References37
Github Security Blog
Github Security Blog
added 2022/05/03 12:0 a.m.39 views

OS Command Injection in git-pull-or-clone

The package git-pull-or-clone before 2.0.2 is vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS1.5AI score0.03978EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/05/03 12:0 a.m.28 views

GHSA-3X62-X456-Q2VM OS Command Injection in git-pull-or-clone

The package git-pull-or-clone before 2.0.2 is vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS9.8AI score0.03978EPSS
SaveExploits1References5
OSV
OSV
added 2022/05/02 3:38 a.m.22 views

GHSA-9RJ9-5WCV-XGF2 Roundup Improper Access Control

The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as...

5.5CVSS6.1AI score0.02322EPSS
SaveExploits0References12
OpenVAS
OpenVAS
added 2022/05/02 12:0 a.m.10 views

Fedora: Security Advisory for usd (FEDORA-2022-61f6ee6353)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.8AI score0.02069EPSS
SaveExploits1References2
NVD
NVD
added 2022/05/01 4:15 p.m.38 views

CVE-2022-24437

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS0.03978EPSS
SaveExploits1References3
Prion
Prion
added 2022/05/01 4:15 p.m.16 views

Command injection

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

7.5CVSS10AI score0.03978EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/05/01 3:20 p.m.34 views

CVE-2022-24437 Command Injection

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS10AI score0.03978EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/01 3:19 p.m.6 views

CVE-2022-24437

The package git-pull-or-clone before 2.0.2 are vulnerable to Command Injection due to the use of the --upload-pack feature of git which is also supported for git clone. The source includes the use of the secure child process API spawn. However, the outpath parameter passed to it may be a...

9.8CVSS7.4AI score0.03978EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.18 views

Fedora: Security Advisory for golang-github-containerd-stargz-snapshotter (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.7 views

Fedora: Security Advisory for golang-github-prometheus-node-exporter (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.6 views

Fedora: Security Advisory for golang-github-intel-goresctrl (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.13 views

Fedora: Security Advisory for golang-github-haproxytech-client-native (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.13 views

Fedora: Security Advisory for golang-github-google-slothfs (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.11 views

Fedora: Security Advisory for golang-k8s-sample-controller (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.10 views

Fedora: Security Advisory for golang-k8s-code-generator (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/29 12:0 a.m.13 views

Fedora: Security Advisory for commit-stream (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/25 12:0 a.m.25 views

Fedora: Security Advisory for kernel-headers (FEDORA-2022-8efcea6e67)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.8AI score0.00387EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2022/04/22 12:0 a.m.17 views

Fedora: Security Advisory for golang-x-crypto (FEDORA-2022-a4c9009f3e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS10AI score0.03931EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/04/21 12:0 a.m.30 views

Oracle OpenJDK Multiple Vulnerabilities (Apr 2022)

Oracle OpenJDK is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.3CVSS6.1AI score0.03203EPSS
SaveExploits0References2
Rows per page
Query Builder