FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-18 11:12:36 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
06c4a79b-981d-11e8-b460-9c5c8e75236acgit -- directory traversal vulnerability

Jann Horn reports:

cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cgi/git/objects/?path=../ request.


Discovery 2018-08-03
Entry 2018-08-04
cgit
< 1.2.1

https://lists.zx2c4.com/pipermail/cgit/2018-August/004176.html
CVE-2018-14912
62c0dbbd-bfce-11e5-b5fe-002590263bf5cgit -- multiple vulnerabilities

Jason A. Donenfeld reports:

Reflected Cross Site Scripting and Header Injection in Mimetype Query String.

Stored Cross Site Scripting and Header Injection in Filename Parameter.

Integer Overflow resulting in Buffer Overflow.


Discovery 2016-01-14
Entry 2016-01-20
cgit
< 0.12

CVE-2016-1899
CVE-2016-1900
CVE-2016-1901
ports/206417
http://lists.zx2c4.com/pipermail/cgit/2016-January/002817.html
http://www.openwall.com/lists/oss-security/2016/01/14/6