Lucene search
+L

3302 matches found

osv-alpine
osv-alpine
•added 2019/12/18 9:15 p.m.•13 views

ALPINE-CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS8.1AI score0.04426EPSS
SaveExploits0References1
osv-cve
osv-cve
•added 2019/12/18 9:15 p.m.•57 views

CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS9.7AI score
SaveExploits0References14
osv-debian
osv-debian
•added 2019/12/18 9:15 p.m.•12 views

DEBIAN-CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS8.1AI score0.04426EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/18 9:15 p.m.•30 views

Remote code execution

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

6.8CVSS8.8AI score0.04426EPSS
SaveExploits0References12Affected Software1
AlpineLinux
AlpineLinux
•added 2019/12/18 8:11 p.m.•71 views

CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS8.1AI score0.04426EPSS
SaveExploits0
Mend
Mend
•added 2019/12/18 8:11 p.m.•6 views

CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS0.04426EPSS
SaveExploits0References21
Debian CVE
Debian CVE
•added 2019/12/18 8:11 p.m.•44 views

CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS8.1AI score0.04426EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/12/18 8:11 p.m.•69 views

CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

9.6AI score0.04426EPSS
SaveExploits0References13
CVE
CVE
•added 2019/12/18 8:11 p.m.•491 views

CVE-2019-1387

CVE-2019-1387 affects Git prior to the fix in 2.24.1, due to too-lax validation of submodule names during recursive clones. This could allow remote code execution when cloning a repository with submodules. Public advisories note the vulnerability and cite fixes in Git versions 2.24.1 and later; s...

8.8CVSS8.1AI score0.04426EPSS
SaveExploits0References14Affected Software1
Vulnrichment
Vulnrichment
•added 2019/12/18 8:11 p.m.•35 views

CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.1AI score0.04426EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/18 12:00 a.m.•4 views

CVE-2019-1387: Undefined Security Weakness

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS7.8AI score0.04426EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/12/17 12:00 a.m.•48 views

SUSE SLES12 Security Update : git (SUSE-SU-2019:3311-1)

This update for git fixes the following issues : Security issues fixed : CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice bsc1158787. CVE-2019-19604: Fixed a recursive clone...

9.8CVSS7.3AI score0.34007EPSS
SaveExploits1References29
osv-suse
osv-suse
•added 2019/12/16 1:55 p.m.•10 views

SUSE-SU-2019:3311-1 Security update for git

This update for git fixes the following issues: Security issues fixed: - CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice bsc1158787. - CVE-2019-19604: Fixed a recursive clone...

9.8CVSS7.2AI score0.34007EPSS
SaveExploits1References20
Veracode
Veracode
•added 2019/12/16 6:30 a.m.•31 views

XML External Entity (XXE)

jersey-core is vulnerable to XML external entity attacks. The external parameter entities were not disabled by the jersey SAX parser, allowing a remote attacker to exploit the vulnerability to read files accessible to the user running the application server, and potentially perform recursive enti...

7.5CVSS5.6AI score0.02184EPSS
SaveExploits0References3Affected Software1
Mageia
Mageia
•added 2019/12/15 6:03 p.m.•96 views

Updated git packages fix security vulnerabilities

The updated packages fix security vulnerabilities: The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths. CVE-2019-1348 When submodules are cloned recursively, under certain circumstances Git could...

9.3CVSS7.3AI score0.34007EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2019/12/13 12:00 a.m.•175 views

Amazon Linux AMI : git (ALAS-2019-1325)

The --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths.CVE-2019-1348 When submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice. ...

9.8CVSS7AI score0.34007EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2019/12/12 12:00 a.m.•71 views

Debian DSA-4581-1 : git - security update

Several vulnerabilities have been discovered in git, a fast, scalable, distributed revision control system. - CVE-2019-1348 It was reported that the --export-marks option of git fast-import is exposed also via the in-stream command feature export-marks=..., allowing to overwrite arbitrary paths. ...

9.8CVSS7.4AI score0.34007EPSS
SaveExploits1References16
UbuntuCve
UbuntuCve
•added 2019/12/10 6:00 p.m.•44 views

CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS8.1AI score0.04426EPSS
SaveExploits0References3
osv-ubuntu
osv-ubuntu
•added 2019/12/10 6:00 p.m.•19 views

UBUNTU-CVE-2019-1387

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. Recursive clones are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote cod...

8.8CVSS8.1AI score0.04426EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/12/10 12:00 a.m.•22 views

PT-2019-5022

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.24.1 Git versions prior to 2.23.1 Git versions prior to 2.22.2 Git versions prior to 2.21.1 Git versions prior to 2.20.2 Git versions prior to 2.19.3 Git versions prior to 2.18.2 Git versions prior to 2.17.3 Git version...

9.3CVSS7.2AI score0.04426EPSS
SaveExploits0References125
Rows per page
Query Builder