Mercurial vulnerabilities

Products

• Mercurial 19
• Scm 3

Newest

• mercurial scm Mercurial SCM Web Interface cross site scripting CVE-2025-2361 Fix available 5.3 MediumMarch 17, 2025
• mercurial scm MonikaBrzica scm uredi_korisnika.php sql injection CVE-2022-3998 6.3 MediumNovember 15, 2022
• mercurial scm MonikaBrzica scm upis_u_bazu.php sql injection CVE-2022-3997 6.3 MediumNovember 15, 2022
• mercurial Mercurial Improper Certificate Validation vulnerability CVE-2010-4237 Fix available 5.9 MediumOctober 29, 2019
• mercurial, debian linux, redhat enterprise linux +2 more Mercurial Path Traversal/Link Following vulnerability CVE-2019-3902 Fix available 5.1 MediumApril 22, 2019
• mercurial Mercurial Out-of-bounds Read vulnerability CVE-2018-17983 Fix available 9.1 CriticalOctober 4, 2018
• mercurial Mercurial Improper Input Validation vulnerability CVE-2018-13348 Fix available 7.5 HighJuly 5, 2018
• mercurial Mercurial mishandles integer addition and subtraction CVE-2018-13347 Fix available 9.8 CriticalJuly 5, 2018
• mercurial Mercurial Improper Input Validation vulnerability CVE-2018-13346 Fix available 7.5 HighJuly 5, 2018
• mercurial, debian linux +1 more Mercurial Incorrect Access Control vulnerability CVE-2018-1000132 Fix available 9.1 CriticalMarch 14, 2018
• mercurial, debian linux +1 more Mercurial vulnerable to arbitrary code injection CVE-2017-17458 Fix available 9.8 CriticalDecember 7, 2017
• mercurial, debian linux, redhat enterprise linux desktop +5 more +7 more Mercurial is vulnerable to shell injection attack CVE-2017-1000116 Fix available 9.8 CriticalAugust 19, 2017
• mercurial, debian linux, redhat enterprise linux desktop +5 more +7 more Mercurial missing symlink check CVE-2017-1000115 Fix available 7.5 HighAugust 19, 2017
• mercurial, debian linux, redhat enterprise linux desktop +5 more +7 more Mercurial has Incorrect Permission Assignment for Critical Resource CVE-2017-9462 Public exploitFix available EPSS 21.7% 8.8 HighJune 6, 2017
• mercurial, debian linux +1 more Mercurial vulnerable to arbitrary code execution when converting Git repos CVE-2016-3105 Fix available 8.8 HighMay 5, 2016
• mercurial, debian linux, fedoraproject fedora +4 more +6 more Mercurial arbitrary code execution vulnerability CVE-2016-3630 Fix available 8.8 HighApril 5, 2016
• mercurial, debian linux, fedoraproject fedora +11 more +13 more Mercurial vulnerable to arbitrary code execution via a crafted name when converting a Git repository CVE-2016-3069 Fix available 8.8 HighApril 5, 2016
• mercurial, debian linux, fedoraproject fedora +11 more +13 more Mercurial arbitrary code execution via a crafted git ext:: URL CVE-2016-3068 Fix available 8.8 HighApril 5, 2016
• mercurial, opensuse +1 more Mercurial vulnerable to arbitrary command execution via a crafted repository name in a clone command CVE-2014-9462 Fix available 7.5 HighMarch 20, 2015
• apple xcode, eclipse egit, jgit +3 more +5 more JGit Improper Input Validation vulnerability CVE-2014-9390 Public exploitFix available EPSS 75.6% 9.8 CriticalDecember 19, 2014
• mercurial Mercurial before 1.0.2 does not enforce the allowpull permission setting for a pull operation... CVE-2008-4297 Fix available 5.0 MediumSeptember 27, 2008
• mercurial Mercurial Directory traversal vulnerability CVE-2008-2942 Fix available 6.8 MediumJune 30, 2008