Github

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-0177 1Github 1Hub May 6, 2026 May 27, 2014 N/A· v4 N/A· v3 3.6 LOW· v2 The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file.
CVE-2012-5814 2Github Roderick Baier 2Gaug.es Weberknecht Apr 29, 2026 Nov 4, 2012 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows m...Show more Weberknecht, as used in GitHub Gaug.es and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.Show less
CVE-2012-2055 1Github 1Github Apr 29, 2026 Apr 5, 2012 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the pub...Show more GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability.Show less

Previous 1...5 6 7 89