Lucene search
+L

2204 matches found

Fedora
Fedora
added 2023/05/29 1:7 a.m.31 views

[SECURITY] Fedora 37 Update: bottles-51.6-1.fc37

Easily manage Wine prefix in a new way! Run Windows software and games on Linux. Features: Create bottles based on environments a set of rule and dependencies for better software compatibility Access to a customizable environment for all your experiments Run every executable .exe/.msi in your...

7.8CVSS7.6AI score0.0047EPSS
SaveExploits0
Fedora
Fedora
added 2023/05/29 1:7 a.m.46 views

[SECURITY] Fedora 38 Update: bottles-51.6-1.fc38

Easily manage Wine prefix in a new way! Run Windows software and games on Linux. Features: Create bottles based on environments a set of rule and dependencies for better software compatibility Access to a customizable environment for all your experiments Run every executable .exe/.msi in your...

7.8CVSS7.6AI score0.0047EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2023/05/23 2:47 p.m.6 views

git: malicious placement of crafted messages when git was compiled with runtime prefix

A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the...

3.3CVSS7.3AI score0.00964EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/05/22 7:12 a.m.7 views

git: malicious placement of crafted messages when git was compiled with runtime prefix

A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the...

3.3CVSS7.3AI score0.00964EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/05/22 7:11 a.m.7 views

git: malicious placement of crafted messages when git was compiled with runtime prefix

A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the...

3.3CVSS7.3AI score0.00964EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/05/22 7:8 a.m.8 views

git: malicious placement of crafted messages when git was compiled with runtime prefix

A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the...

3.3CVSS7.3AI score0.00964EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/05/22 7:7 a.m.6 views

git: malicious placement of crafted messages when git was compiled with runtime prefix

A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the...

3.3CVSS7.3AI score0.00964EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/05/22 6:55 a.m.7 views

git: malicious placement of crafted messages when git was compiled with runtime prefix

A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the...

3.3CVSS7.3AI score0.00964EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/05/17 3:23 p.m.6 views

git: malicious placement of crafted messages when git was compiled with runtime prefix

A vulnerability was found in Git. This security flaw occurs when Git compiles with runtime prefix support and runs without translated messages, and it still uses the gettext machinery to display messages, which subsequently looks for translated messages in unexpected places. This flaw allows the...

3.3CVSS7.3AI score0.00964EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2023/05/15 8:51 a.m.37 views

CVE-2023-26125

A flaw was found in Gin-Gonic Gin. This flaw allows a remote attacker to bypass security restrictions caused by improper input validation. An attacker can perform cache poisoning attacks by sending a specially-crafted request using the X-Forwarded-Prefix header. Mitigation Mitigation for this iss...

7.3CVSS7AI score0.0119EPSS
SaveExploits1References4
Veracode
Veracode
added 2023/05/10 4:23 a.m.23 views

Cache Poisoning

github.com/gin-gonic/gin is vulnerable to Cache Poisoning. The vulnerability exists in the redirectTrailingSlash function of gin.go as it does not properly escape special characters in the header, which allows an attacker to inject a malicious payload via the X-Forwarded-Prefix header...

7.3CVSS8.8AI score0.00905EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2023/05/06 6:19 p.m.16 views

MGASA-2023-0163 Updated git packages fix security vulnerability

By feeding specially crafted input to 'git apply --reject', a path outside the working tree can be overwritten with partially controlled contents corresponding to the rejected hunks from the given patch. CVE-2023-25652. When Git is compiled with runtime prefix support and runs without translated...

7.8CVSS5.8AI score0.51883EPSS
SaveExploits2References4
Github Security Blog
Github Security Blog
added 2023/05/04 6:30 a.m.46 views

Improper input validation in github.com/gin-gonic/gin

Versions of the package github.com/gin-gonic/gin before version 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. Note: Although this issue does not pose a...

7.3CVSS8.9AI score0.00905EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2023/05/04 6:30 a.m.47 views

GHSA-3VP4-M3RF-835H Improper input validation in github.com/gin-gonic/gin

Versions of the package github.com/gin-gonic/gin before version 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. Note: Although this issue does not pose a...

5.6CVSS6.3AI score0.00905EPSS
SaveExploits1References7
NVD
NVD
added 2023/05/04 5:15 a.m.31 views

CVE-2023-26125

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. Note: Although this issue does not pose a significant...

7.3CVSS6.4AI score0.00905EPSS
SaveExploits1References5
OSV
OSV
added 2023/05/04 5:15 a.m.6 views

DEBIAN-CVE-2023-26125

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. Note: Although this issue does not pose a significant...

7.3CVSS7.3AI score0.00905EPSS
SaveExploits1References1
Prion
Prion
added 2023/05/04 5:15 a.m.22 views

Input validation

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. Note: Although this issue does not pose a significant...

7.5CVSS7.2AI score0.00905EPSS
SaveExploits1References5Affected Software1
UbuntuCve
UbuntuCve
added 2023/05/04 5:15 a.m.123 views

CVE-2023-26125

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. Note: Although this issue does not pose a significant...

7.3CVSS6.8AI score0.00905EPSS
SaveExploits1References7
OSV
OSV
added 2023/05/04 5:15 a.m.2 views

UBUNTU-CVE-2023-26125

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. Note: Although this issue does not pose a significant...

7.3CVSS6.7AI score0.00905EPSS
SaveExploits1References8
Cvelist
Cvelist
added 2023/05/04 5:0 a.m.33 views

CVE-2023-26125

Versions of the package github.com/gin-gonic/gin before 1.9.0 are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache poisoning. Note: Although this issue does not pose a significant...

5.6CVSS7.4AI score0.00905EPSS
SaveExploits1References5
Rows per page
Query Builder