vcs project vcs vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

An SQL injection vulnerability issue exists in Sourcecodester Simple E-Learning System 1.0., in /vcs/classRoom.php?classCode=, classCode.

Simple E-learning System Project Simple E-learning System 1.0

9.8

CVSSv3

The package github.com/masterminds/vcs prior to 1.13.3 are vulnerable to Command Injection via argument injection. When hg is executed, argument strings are passed to hg in a way that additional flags can be set. The additional flags can be used to perform a command injection.

Vcs Project Vcs

8.1

CVSSv3

In affected versions of Octopus Server it is possible to use the Git Connectivity test function on the VCS project to initiate an SMB request resulting in the potential for an NTLM relay attack.

Octopus Octopus Server

7.8

CVSSv3

In JetBrains PyCharm prior to 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS.

Jetbrains Pycharm

1 Github repository

7.8

CVSSv3

In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the project from VCS.

7.5

CVSSv3

An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learning System v1.0 allows malicious users to read arbitrary files.

Simple E-learning System Project Simple E-learning System 1.0

7.5

CVSSv3

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook