enterprise repository vulnerabilities and exploits

(subscribe to this query)

NA

Malicious code exists in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific fun...

Tukaani Xz 5.6.1 Tukaani Xz 5.6.0

71 Github repositories4 Articles

NA

An Improper Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed an malicious user to use the Enterprise Actions GitHub Connect download token to fetch private repository data. An attacker would require an account on the server instance with ...

NA

A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the transfer. This vulnerability affected GitHub Enterprise Server version 3.8.0 and abov...

Github Enterprise Server Github Enterprise Server 3.11.0

NA

Improper access control in all versions of GitHub Enterprise Server allows unauthorized users to view private repository names via the "Get a check run" API endpoint. This vulnerability did not allow unauthorized access to any repository content besides the name. This v...

Github Enterprise Server

NA

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content as it also required contents:write and iss...

Github Enterprise Server Github Enterprise Server 3.11.0

NA

A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1.

Github Enterprise Server Github Enterprise Server 3.11.0

NA

Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper validation of HTTP headers, a remote attacker is able to elevate their privilege by tunneling HTTP requests, allowing them to execute HTTP requ...

Qlik Qlik Sense August 2022 Qlik Qlik Sense November 2022 Qlik Qlik Sense February 2023 Qlik Qlik Sense May 2023 Qlik Qlik Sense November 2021 Qlik Qlik Sense February 2022 Qlik Qlik Sense May 2022 Qlik Qlik Sense August 2023

1 Article

NA

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened Pull Request. To do so, an attacker would need write access to the repository. This vulnerability affected all versions of...

Github Enterprise Server 3.10.0 Github Enterprise Server

NA

Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit ...

Eclipse Jgit

2 Github repositories

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook