Lucene search
+L

10262 matches found

NVD
NVD
•added 2026/02/09 11:16 p.m.•23 views

CVE-2026-25934

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS0.00156EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/09 11:16 p.m.•9 views

DEBIAN-CVE-2026-25934

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS6.5AI score0.00156EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/02/09 11:16 p.m.•14 views

CVE-2026-25934

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS6.5AI score0.00156EPSS
SaveExploits0References4
OSV
OSV
•added 2026/02/09 11:16 p.m.•9 views

UBUNTU-CVE-2026-25934

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS6.5AI score0.00156EPSS
SaveExploits0References5
CVE
CVE
•added 2026/02/09 10:13 p.m.•72 views

CVE-2026-25934

Summary of CVE-2026-25934 : The go-git library (prior to v5.16.5) did not properly verify data integrity for .pack and .idx files, which could allow consuming corrupted packfiles/indexes and result in errors such as object not found. This vulnerability affects the integrity checks used when fetch...

4.3CVSS6.5AI score0.00156EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/02/09 10:13 p.m.•23 views

CVE-2026-25934

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS6.5AI score0.00156EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/02/09 10:13 p.m.•7 views

CVE-2026-25934 go-git improperly verifies data integrity values for .idx and .pack files

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS6.5AI score0.00156EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/09 10:13 p.m.•13 views

CVE-2026-25934 go-git improperly verifies data integrity values for .idx and .pack files

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS5.6AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2026/02/09 10:13 p.m.•19 views

CVE-2026-25934

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS6.5AI score0.00156EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/02/09 10:13 p.m.•50 views

CVE-2026-25934 go-git improperly verifies data integrity values for .idx and .pack files

go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would like...

4.3CVSS0.00156EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/02/09 12:00 a.m.•25 views

go-git 安全漏洞

go-git is an open-source, highly scalable Git implementation written entirely in Go. Versions of go-git prior to 5.16.5 contained security vulnerabilities. These vulnerabilities stemmed from improper validation of data integrity values in the .pack and .idx files, which could lead to errors when...

4.3CVSS6.5AI score0.00156EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/09 12:00 a.m.•26 views

PT-2026-7181

Name of the Vulnerable Software and Affected Versions go-git versions prior to 5.16.5 Description go-git is a Git implementation library written in Go. A flaw exists in how go-git handles the integrity verification of .pack and .idx files. Specifically, data integrity values were not properly...

9.8CVSS6.4AI score0.00156EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/09 12:00 a.m.•3 views

CVE-2026-0632: Server-Side Request Forgery (SSRF)

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.12 via the 'saveDataSource' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to...

5.4CVSS5.8AI score0.00239EPSS
SaveExploits0References1
SUSE Linux
SUSE Linux
•added 2026/02/05 2:23 p.m.•19 views

Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI bsc1257034 - CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX bsc1257036 - CVE-2026-21933: Fixed Oracle Java SE component Networking bsc1257037 -...

7.5CVSS6.7AI score0.0097EPSS
SaveExploits1References18
OSV
OSV
•added 2026/02/04 12:45 p.m.•10 views

SUSE-SU-2026:0382-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Security fixes: - CVE-2026-21925: Fixed Oracle Java SE component RMI bsc1257034 - CVE-2026-21932: Fixed Oracle Java SE component AWT and JavaFX bsc1257036 - CVE-2026-21933: Fixed Oracle Java SE component Networking bsc1257037 -...

7.5CVSS6.6AI score0.0097EPSS
SaveExploits1References10
Patchstack
Patchstack
•added 2026/02/03 12:14 p.m.•18 views

WordPress Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget vulnerability

Authenticated Contributor+ DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget vulnerability discovered by zer0gh0st in WordPress Plugin Element Pack Elementor Addons versions = 5.10.1...

6.4CVSS5.3AI score0.00248EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/02/02 8:42 p.m.•20 views

WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Price List Widget vulnerability discovered by wesley wcraft in WordPress Plugin Element Pack Elementor Addons versions = 5.6.0...

6.4CVSS5.2AI score0.0032EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/02/02 8:42 p.m.•21 views

WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Panel Slider Widget vulnerability discovered by RandomRoot in WordPress Plugin Element Pack Elementor Addons versions = 5.6.0...

6.4CVSS5.2AI score0.0032EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/02/02 8:09 a.m.•24 views

WordPress Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by wesley wcraft in WordPress Plugin Element Pack Elementor Addons versions = 5.6.11...

6.4CVSS5.3AI score0.00334EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/02/02 6:41 a.m.•22 views

WordPress Element Pack Elementor Addons plugin <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Open Map Widget vulnerability discovered by zer0gh0st in WordPress Plugin Element Pack Elementor Addons versions = 5.10.2...

5.4CVSS7.3AI score0.00263EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder