CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 06/11/2019 |
| CVE-2019-7628 | 보통5.9 | Pagure 5.2 leaks API keys by e-mailing them to users. Few e-mail servers validate TLS certificates, so it is easy for man-in-the-middle attackers to read these e-mails and gain access to Pagure on behalf of other users. This issue is found in the API token expiration reminder cron job in files/api_key_expire_mail.py; d | 08/02/2019 |
| CVE-2017-1002151 | 높음7.5 | Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization | 14/09/2017 |
| CVE-2016-1000007 | 보통6.1 | Pagure 2.2.1 XSS in raw file endpoint | 07/10/2016 |