CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2019-1351
https://notcve.org/view.php?id=CVE-2019-1351
A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'. Se presenta una vulnerabilidad de manipulación cuando Git para Visual Studio maneja inapropiadamente las rutas de unidades virtuales, también se conoce como "Git for Visual Studio Vulnerability". • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1351 https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com https://security.gentoo.org/glsa/202003-30 • CWE-706: Use of Incorrectly-Resolved Name or Reference •
CVSS: 9.3EPSS: 8%CPEs: 2EXPL: 0CVE-2019-1350
https://notcve.org/view.php?id=CVE-2019-1350
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387. Se presenta una vulnerabilidad de ejecución de código remota cuando Git para Visual Studio sanea inapropiadamente la entrada, también se conoce como "Git for Visual Studio Remote Code Execution Vulnerability". Este ID de CVE es diferente de CVE-2019-1349, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387. • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1350 https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com https://security.gentoo.org/glsa/202003-30 https://security.gentoo.org/glsa/202003-42 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 8%CPEs: 2EXPL: 0CVE-2019-1349 – git: Recursive submodule cloning allows using git directory twice with synonymous directory name written in .git/
https://notcve.org/view.php?id=CVE-2019-1349
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387. Se presenta una vulnerabilidad de ejecución de código remota cuando Git para Visual Studio sanea inapropiadamente la entrada, también se conoce como "Git for Visual Studio Remote Code Execution Vulnerability". Este ID de CVE es diferente de CVE-2019-1350, CVE-2019-1352, CVE-2019-1354, CVE-2019-1387. An improper input validation flaw was discovered in git in the way it handles git submodules. • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html https://access.redhat.com/errata/RHSA-2020:0228 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1349 https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com https://security.gentoo.org/glsa/202003-30 https://access.redhat.com/security/cve/CVE-2019-1349 https://bugzilla.redhat.com/show_bug.cgi • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 8%CPEs: 2EXPL: 0CVE-2019-1352 – git: Files inside the .git directory may be overwritten during cloning via NTFS Alternate Data Streams
https://notcve.org/view.php?id=CVE-2019-1352
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387. Se presenta una vulnerabilidad de ejecución de código remota cuando Git para Visual Studio sanea inapropiadamente la entrada, también se conoce como "Git for Visual Studio Remote Code Execution Vulnerability". Este ID de CVE es diferente de CVE-2019-1349, CVE-2019-1350, CVE-2019-1354, CVE-2019-1387. • http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00056.html http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00003.html https://access.redhat.com/errata/RHSA-2020:0228 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1352 https://public-inbox.org/git/xmqqr21cqcn9.fsf%40gitster-ct.c.googlers.com https://security.gentoo.org/glsa/202003-30 https://access.redhat.com/security/cve/CVE-2019-1352 https://bugzilla.redhat.com/show_bug.cgi • CWE-20: Improper Input Validation CWE-73: External Control of File Name or Path •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0CVE-2019-1486
https://notcve.org/view.php?id=CVE-2019-1486
A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary URL specified by the session host, aka 'Visual Studio Live Share Spoofing Vulnerability'. Hay una vulnerabilidad de suplantación de identidad en Visual Studio Live Share cuando un invitado conectado a una sesión Live Share es redireccionado a una URL arbitraria especificada por el host de la sesión, también se conoce como "Visual Studio Live Share Spoofing Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1486 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •