Lucene search
+L

37 matches found

Fedora
Fedora
added 2022/07/17 1:16 a.m.26 views

[SECURITY] Fedora 35 Update: golang-github-projectdiscovery-chaos-client-0.2.0-2.fc35

Go client to communicate with Chaos DNS API...

9.3CVSS1.3AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/17 1:15 a.m.21 views

[SECURITY] Fedora 35 Update: golang-github-crossdock-0-0.8.20190628git049aabb.fc35

A Go client for Crossdock...

9.3CVSS1.7AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/04 1:35 a.m.27 views

[SECURITY] Fedora 36 Update: golang-github-projectdiscovery-chaos-client-0.2.0-2.fc36

Go client to communicate with Chaos DNS API...

9.3CVSS8.1AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/04 1:35 a.m.27 views

[SECURITY] Fedora 36 Update: golang-github-haproxytech-client-native-2.5.3-3.fc36

Go client for HAProxy configuration and runtime API...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
Fedora
Fedora
added 2022/07/04 1:35 a.m.19 views

[SECURITY] Fedora 36 Update: golang-github-crossdock-0-0.8.20190628git049aabb.fc36

A Go client for Crossdock...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
OSV
OSV
added 2022/05/13 1:25 a.m.35 views

GHSA-R4M4-PMVW-M6J5 Apache Thrift Go Library Command Injection

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

8.8CVSS8.9AI score0.07061EPSS
SaveExploits0References7
OSV
OSV
added 2022/02/15 4:15 p.m.34 views

AZL-34541 CVE-2022-21698 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.2-2

clientgolang is the instrumentation library for Go applications in Prometheus, and the promhttp package in clientgolang provides tooling around HTTP servers and clients. In clientgolang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and...

7.5CVSS6.7AI score0.05994EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/15 4:15 p.m.12 views

AZL-43738 CVE-2022-21698 affecting package buildah 1.18.0-29

clientgolang is the instrumentation library for Go applications in Prometheus, and the promhttp package in clientgolang provides tooling around HTTP servers and clients. In clientgolang prior to version 1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and...

7.5CVSS6.7AI score0.05994EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2019/10/17 2:54 p.m.6 views

thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

9CVSS7.4AI score0.07061EPSS
SaveExploits0References4
CNVD
CNVD
added 2018/02/26 12:0 a.m.6 views

Apache Thrift Go client library remote code execution vulnerability

Apache Thrift is the United States Apache Apache Software Foundation's set of remote invocation framework , which allows in the definition file to define data types and service interfaces . Go client library is one of the client library . The Go client library in Apache Thrift is vulnerable to a...

9CVSS7AI score0.07061EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2018/02/13 4:49 a.m.24 views

CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

9CVSS3.6AI score0.07061EPSS
SaveExploits0References1
OSV
OSV
added 2018/02/12 5:29 p.m.7 views

DEBIAN-CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

8.8CVSS7.9AI score0.07061EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2018/02/12 5:29 p.m.32 views

CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

9CVSS7.2AI score0.07061EPSS
SaveExploits0References3
OSV
OSV
added 2018/02/12 5:29 p.m.18 views

CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

8.8CVSS9.2AI score
SaveExploits0References6
CVE
CVE
added 2018/02/12 5:0 p.m.74 views

CVE-2016-5397

Concisely: CVE-2016-5397 affects the Apache Thrift Go client library. The vulnerability arises from code-generation time where an external formatting tool could allow a remote attacker to execute arbitrary commands, as described for Apache Thrift 0.9.3 and older. The issue is exploitable via Go c...

9CVSS8.8AI score0.07061EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2018/02/12 5:0 p.m.36 views

CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

8.4AI score0.07061EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2018/02/12 5:0 p.m.59 views

CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

9CVSS9AI score0.07061EPSS
SaveExploits0
Rows per page
Query Builder