Filters
Software
Mercurial MercurialMercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote…
5.9
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Debian Debian LinuxMercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Pro…
9.1
First published (updated )
Redhat Enterprise Linux Server EusThe symlink auditor is sometimes cached too long, and can be confused into allowing write access to …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Enterprise Linux Server EusOS Command Injection
10
First published (updated )
Redhat Enterprise Linux Server EusIn Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python…
First published (updated )
Debian Debian LinuxThe convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arb…
8.8
First published (updated )
SUSE Linux Enterprise Software Development KitInput Validation
8.8
First published (updated )
SUSE Linux Enterprise Software Development KitInput Validation
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
SUSE Linux Enterprise Software Development KitThe binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code…
8.8
First published (updated )
Mercurial MercurialMercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation from h…
First published (updated )