Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2010-2447 gitolite before 1.4.1 does not filter src/ or hooks/ from path names. Gitolite 1.4.1+ Fix from $2,3002019-11-07 HIGH 8.1 CVE-2018-20683 commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" im… Gitolite 3.6.11+ Fix from $1,9502019-01-10 MEDIUM 5.5 CVE-2013-7203 gitolite before commit fa06a34 might allow local users to read arbitrary files in repositories via vectors related to the user umask when running git… Gitolite after 3.5.3 Fix from $1,6002018-09-21 CRITICAL 9.8 CVE-2013-4451 gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating… Gitolite after 3.5.3 Fix from $2,3002018-09-21 HIGH 8.1 CVE-2018-16976 Gitolite before 3.6.9 does not (in certain configurations involving @all or a regex) properly restrict access to a Git repository that is in the proc… Gitolite 3.6.9+ Fix from $1,9502018-09-12 MEDIUM 6.8 CVE-2011-1572 Directory traversal vulnerability in the Admin Defined Commands (ADC) feature in gitolite before 1.5.9.1 allows remote attackers to execute arbitrary… Gitolite after 1.5.9 Fix from $1,6002011-10-04