Lucene search
+L

70 matches found

Mageia
Mageia
added 2023/03/18 10:16 p.m.44 views

Updated ruby-git packages fix security vulnerability

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. CVE-2022-46648, CVE-2022-47318...

8.8CVSS6.9AI score0.0136EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/18 10:16 p.m.14 views

MGASA-2023-0097 Updated ruby-git packages fix security vulnerability

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. CVE-2022-46648, CVE-2022-47318...

8.8CVSS8.6AI score0.0136EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2023/03/02 9:1 a.m.35 views

CVE-2022-46648

A flaw was found in the ruby-git package, which allows a remote authenticated attacker to execute arbitrary code on the system, caused by a code injection flaw. An attacker can execute arbitrary code on the system by using a specially-crafted filename in the repository...

8CVSS5.5AI score0.01351EPSS
SaveExploits0References4
Veracode
Veracode
added 2023/02/14 1:21 p.m.23 views

Remote Code Execution

ruby-git:sid is vulnerable to Remote Code Execution. The vulnerability allows an attacker to remotely execute arbitrary code by getting a user to load a repository containing a specially crafted filename to the product...

8CVSS8.3AI score0.0136EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/31 12:0 a.m.37 views

Debian dla-3303 : ruby-git - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3303 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3303-1 [email protected]...

9.8CVSS7.4AI score0.04871EPSS
SaveExploits1References8
OpenVAS
OpenVAS
added 2023/01/31 12:0 a.m.25 views

Debian: Security Advisory (DLA-3303-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.04871EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/31 12:0 a.m.37 views

DLA-3303-1 ruby-git - security update

Bulletin has no description...

9.8CVSS8.7AI score0.04871EPSS
SaveExploits1
Debian
Debian
added 2023/01/30 10:33 p.m.97 views

[SECURITY] [DLA 3303-1] ruby-git security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3303-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 31, 2023 https://wiki.debian.org/LTS -...

9.8CVSS9.9AI score0.04871EPSS
SaveExploits1
OSV
OSV
added 2023/01/17 12:30 p.m.38 views

GHSA-PPHF-GFRM-V32R Code injection in ruby git

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8CVSS7.7AI score0.0136EPSS
SaveExploits0References6
NVD
NVD
added 2023/01/17 10:15 a.m.31 views

CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8.8CVSS8.1AI score0.0136EPSS
SaveExploits0References5
OSV
OSV
added 2023/01/17 10:15 a.m.4 views

DEBIAN-CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8CVSS7AI score0.0136EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/17 10:15 a.m.25 views

CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS8.1AI score0.01351EPSS
SaveExploits0References4
OSV
OSV
added 2023/01/17 10:15 a.m.2 views

DEBIAN-CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS7AI score0.01351EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2023/01/17 10:15 a.m.41 views

CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS7.1AI score0.01351EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2023/01/17 10:15 a.m.42 views

CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8.8CVSS7.1AI score0.0136EPSS
SaveExploits0References4
Prion
Prion
added 2023/01/17 10:15 a.m.25 views

Code injection

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

6CVSS7.7AI score0.0136EPSS
SaveExploits0References5Affected Software3
OSV
OSV
added 2023/01/17 10:15 a.m.7 views

UBUNTU-CVE-2022-47318

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648...

8.8CVSS7.1AI score0.0136EPSS
SaveExploits0References5
OSV
OSV
added 2023/01/17 10:15 a.m.10 views

UBUNTU-CVE-2022-46648

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

8CVSS7.1AI score0.01351EPSS
SaveExploits0References5
Prion
Prion
added 2023/01/17 10:15 a.m.28 views

Code injection

ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318...

6CVSS7.7AI score0.0136EPSS
SaveExploits0References4Affected Software2
CNNVD
CNNVD
added 2023/01/17 12:0 a.m.27 views

ruby-git 安全漏洞

ruby-git is a Ruby library. It can be used to create, read, and manipulate Git repositories by wrapping system calls into git binaries. A security vulnerability exists in ruby-git v1.13.0 and earlier versions that could allow an authenticated, remote attacker to execute arbitrary ruby code by...

8.8CVSS7.3AI score0.0136EPSS
SaveExploits0References7
Rows per page
Query Builder