| Max CVSS | 6.5 | Min CVSS | 6.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-4548 | 6.0 |
Argument injection vulnerability in syntax-highlighting.sh in cgit 9.0.3 and earlier allows remote authenticated users with permissions to add files to execute arbitrary commands via the --plug-in argument to the highlight command. Per http://cwe.mit
|
29-08-2017 - 01:32 | 11-11-2012 - 13:00 | |
| CVE-2012-4465 | 6.5 |
Heap-based buffer overflow in the substr function in parsing.c in cgit 0.9.0.3 and earlier allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via an empty username in the "Author" field in a com
|
30-01-2013 - 04:54 | 10-10-2012 - 18:55 |