Lucene search
K

70 matches found

OSV
OSV
added 2023/03/18 10:16 p.m.7 views

MGASA-2023-0097 Updated ruby-git packages fix security vulnerability

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. CVE-2022-46648, CVE-2022-47318...

8.8CVSS8.6AI score0.01975EPSS
Exploits0References4
Mageia
Mageia
added 2023/03/18 10:16 p.m.37 views

Updated ruby-git packages fix security vulnerability

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. CVE-2022-46648, CVE-2022-47318...

8.8CVSS6.9AI score0.01975EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2023/03/02 9:1 a.m.31 views

CVE-2022-46648

A flaw was found in the ruby-git package, which allows a remote authenticated attacker to execute arbitrary code on the system, caused by a code injection flaw. An attacker can execute arbitrary code on the system by using a specially-crafted filename in the repository...

8CVSS5.5AI score0.01975EPSS
Exploits0References4
Veracode
Veracode
added 2023/02/14 1:21 p.m.21 views

Remote Code Execution

ruby-git:sid is vulnerable to Remote Code Execution. The vulnerability allows an attacker to remotely execute arbitrary code by getting a user to load a repository containing a specially crafted filename to the product...

8CVSS8.3AI score0.00465EPSS
Exploits0References7Affected Software1
OpenVAS
OpenVAS
added 2023/01/31 12:0 a.m.24 views

Debian: Security Advisory (DLA-3303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.05735EPSS
Exploits1References4
OSV
OSV
added 2023/01/31 12:0 a.m.34 views

DLA-3303-1 ruby-git - security update

Bulletin has no description...

9.8CVSS8.7AI score0.05735EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2023/01/31 12:0 a.m.34 views

Debian dla-3303 : ruby-git - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3303 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3303-1 [email protected]...

9.8CVSS7.4AI score0.05735EPSS
Exploits1References8
Debian
Debian
added 2023/01/30 10:33 p.m.26 views

[SECURITY] [DLA 3303-1] ruby-git security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3303-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 31, 2023 https://wiki.debian.org/LTS -...

9.8CVSS9.9AI score0.05735EPSS
Exploits1
OSV
OSV
added 2023/01/17 12:30 p.m.33 views

GHSA-PPHF-GFRM-V32R Code injection in ruby git

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8CVSS7.7AI score0.00465EPSS
Exploits0References6
NVD
NVD
added 2023/01/17 10:15 a.m.18 views

CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8.8CVSS8.1AI score0.00465EPSS
Exploits0References5
OSV
OSV
added 2023/01/17 10:15 a.m.2 views

DEBIAN-CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8CVSS7AI score0.00465EPSS
Exploits0References1
NVD
NVD
added 2023/01/17 10:15 a.m.20 views

CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS8.1AI score0.01975EPSS
Exploits0References4
OSV
OSV
added 2023/01/17 10:15 a.m.25 views

CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8CVSS7.7AI score
Exploits0References5
OSV
OSV
added 2023/01/17 10:15 a.m.29 views

CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS7.7AI score
Exploits0References4
OSV
OSV
added 2023/01/17 10:15 a.m.1 views

DEBIAN-CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS7AI score0.01975EPSS
Exploits0References1
Prion
Prion
added 2023/01/17 10:15 a.m.25 views

Code injection

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

6CVSS7.7AI score0.01975EPSS
Exploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2023/01/17 10:15 a.m.37 views

CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8.8CVSS7.1AI score0.00465EPSS
Exploits0References4
Prion
Prion
added 2023/01/17 10:15 a.m.23 views

Code injection

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

6CVSS7.7AI score0.01975EPSS
Exploits0References5Affected Software3
OSV
OSV
added 2023/01/17 10:15 a.m.2 views

UBUNTU-CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS7.1AI score0.01975EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2023/01/17 10:15 a.m.33 views

CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS7.1AI score0.01975EPSS
Exploits0References4
Rows per page
Query Builder