Latest vulnerabilities for "mercurial"

5.3

First published (updated )

CVE-2022-43410

Jenkins Repository ConnectorPath Traversal

5.3

First published (updated )

CVE-2022-30949

Jenkins Git ServerPath Traversal

7.5

First published (updated )

CVE-2022-30947

MercurialJenkins Mercurial Plugin 2.16 and earlier allows attackers able to configure pipelines to check out …

7.5

First published (updated )

CVE-2022-30948

maven/org.jenkins-ci.plugins:mercurialA missing permission check in Jenkins Mercurial Plugin 2.11 and earlier allows attackers with Overal…

4.3

First published (updated )

CVE-2020-2306

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/jenkinsXEE

6.5

First published (updated )

CVE-2020-2305

GitInput Validation

9.8

First published (updated )

CVE-2014-9390

pip/mercurialMercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote…

5.9

First published (updated )

CVE-2010-4237

pip/mercurialPath Traversal

5.9

First published (updated )

CVE-2019-3902

pip/mercurialLast updated 24 July 2024

9.1

First published (updated )

CVE-2018-17983

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

pip/mercurialInput Validation

7.5

First published (updated )

CVE-2018-13348

redhat/mercurialInput Validation

7.5

First published (updated )

CVE-2018-13346

redhat/mercurialInteger Overflow

9.8

First published (updated )

CVE-2018-13347

maven/org.jenkins-ci.plugins:mercurialAn improper authorization vulnerability exists in Jenkins Mercurial Plugin version 2.2 and earlier i…

5.3

First published (updated )

CVE-2018-1000112

DebianMercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Pro…

9.1

First published (updated )

CVE-2018-1000132

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DebianOS Command Injection

10

First published (updated )

CVE-2017-17458

Red Hat Enterprise Linux ServerThe symlink auditor is sometimes cached too long, and can be confused into allowing write access to …

7.5

First published (updated )

CVE-2017-1000115

Red Hat Enterprise Linux ServerOS Command Injection

10

First published (updated )

CVE-2017-1000116

Red Hat Enterprise Linux ServerIn Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python…

9

First published (updated )

CVE-2017-9462

pip/mercurialThe convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arb…

8.8

First published (updated )

CVE-2016-3105

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

SUSE Linux Enterprise Software Development KitInput Validation

8.8

First published (updated )

CVE-2016-3069

Red Hat Enterprise Linux ServerInput Validation

8.8

First published (updated )

CVE-2016-3068

SUSE Linux Enterprise Software Development KitThe binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code…

8.8

First published (updated )

CVE-2016-3630

openSUSE libeconfInput Validation

9.8

First published (updated )

CVE-2014-9462

MercurialMercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from h…

5

First published (updated )

CVE-2008-4297

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

pip/mercurialPath Traversal