Lucene search
+L

244 matches found

OSV
OSV
added 2020/11/15 3:45 p.m.14 views

MGASA-2020-0424 Updated golang packages fix a security vulnerability

A flaw was found in Go standard library packages. Both the net/http/cgi and net/http/fcgi packages use a default Content-Type response header value of "text/html", rather than "text/plain". An attacker could exploit this in applications using these packages by uploading crafted files, allowing fo...

6.1CVSS6.1AI score0.03646EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
added 2020/10/27 2:47 p.m.15 views

golang: data race in certain net/http servers including ReverseProxy can lead to DoS

A flaw was found Go's net/http package. Servers using ReverseProxy from net/http in the Go standard library are vulnerable to a data race that results in a denial of service. The highest threat from this vulnerability is to system availability...

5.9CVSS7.3AI score0.02906EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/10/08 10:52 a.m.8 views

golang: data race in certain net/http servers including ReverseProxy can lead to DoS

A flaw was found Go's net/http package. Servers using ReverseProxy from net/http in the Go standard library are vulnerable to a data race that results in a denial of service. The highest threat from this vulnerability is to system availability...

5.9CVSS7.3AI score0.02906EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2020/09/02 1:19 p.m.52 views

CVE-2020-24553

A flaw was found in the Go standard library packages before upstream versions 1.15 and 1.14.8. Both the net/http/cgi and net/http/fcgi packages use a default Content-Type response header value of "text/html", rather than "text/plain". This flaw allows an attacker to exploit this issue in...

4.3CVSS6.1AI score0.03646EPSS
SaveExploits2References5
Rows per page
Query Builder