mercurial vulnerabilities (Mageia)

16 vulnerabilities.

• mercurial Mageia Mercurial SCM Web Interface cross site scripting CVE-2025-2361 Fix available 5.3 MediumMarch 17, 2025
• mercurial Mageia Mercurial Path Traversal/Link Following vulnerability CVE-2019-3902 Fix available 5.1 MediumApril 22, 2019
• mercurial Mageia Mercurial Out-of-bounds Read vulnerability CVE-2018-17983 Fix available 9.1 CriticalOctober 4, 2018
• mercurial Mageia Mercurial Improper Input Validation vulnerability CVE-2018-13348 Fix available 7.5 HighJuly 5, 2018
• mercurial Mageia Mercurial mishandles integer addition and subtraction CVE-2018-13347 Fix available 9.8 CriticalJuly 5, 2018
• mercurial Mageia Mercurial Improper Input Validation vulnerability CVE-2018-13346 Fix available 7.5 HighJuly 5, 2018
• mercurial Mageia Mercurial Incorrect Access Control vulnerability CVE-2018-1000132 Fix available 9.1 CriticalMarch 14, 2018
• mercurial Mageia Mercurial vulnerable to arbitrary code injection CVE-2017-17458 Fix available 9.8 CriticalDecember 7, 2017
• mercurial Mageia Mercurial is vulnerable to shell injection attack CVE-2017-1000116 Fix available 9.8 CriticalAugust 19, 2017
• mercurial Mageia Mercurial missing symlink check CVE-2017-1000115 Fix available 7.5 HighAugust 19, 2017
• mercurial Mageia Mercurial has Incorrect Permission Assignment for Critical Resource CVE-2017-9462 Public exploitFix available EPSS 21.7% 8.8 HighJune 6, 2017
• mercurial Mageia Mercurial vulnerable to arbitrary code execution when converting Git repos CVE-2016-3105 Fix available 8.8 HighMay 5, 2016
• mercurial Mageia Mercurial arbitrary code execution vulnerability CVE-2016-3630 Fix available 8.8 HighApril 5, 2016
• mercurial Mageia Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository CVE-2016-3069 Fix available 8.8 HighApril 5, 2016
• mercurial Mageia Mercurial arbitrary code execution via a crafted git ext:: URL CVE-2016-3068 Fix available 8.8 HighApril 5, 2016
• mercurial Mageia Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command CVE-2014-9462 Fix available 7.5 HighMarch 20, 2015