Lucene search
+L

16 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2020-29509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The encoding/xml package in Go all versions does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which...

9.8CVSS6.8AI score0.02081EPSS
Exploits0References4
CBLMariner
CBLMariner
added 2025/01/12 9:15 a.m.39 views

CVE-2020-29509 affecting package golang 1.17.13-2

CVE-2020-29509 affecting package golang 1.17.13-2. No patch is available currently...

9.8CVSS9.9AI score0.02081EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2024/07/12 12:0 a.m.23 views

RHEL 7 : golang (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - go: encoding/xml: XML element instability CVE-2020-29511 - The x/text package before 0.3.3 for Go has a...

9.8CVSS9.2AI score0.02081EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2024/01/16 12:0 a.m.31 views

EulerOS 2.0 SP10 : golang (EulerOS-SA-2023-2786)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The encoding/xml package in Go all versions does not correctly preserve the semantics of attribute namespace prefixes during tokenization...

9.8CVSS7.5AI score0.02081EPSS
Exploits0References7
CBLMariner
CBLMariner
added 2023/10/18 8:40 p.m.34 views

CVE-2020-29509 affecting package golang for versions less than 1.20.10-1

CVE-2020-29509 affecting package golang for versions less than 1.20.10-1. An upgraded version of the package is available that resolves this issue...

9.8CVSS5.9AI score0.02081EPSS
Exploits0
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2810)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.02081EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2023-2786)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8AI score0.02081EPSS
Exploits0References2
Circl
Circl
added 2022/06/29 3:35 a.m.19 views

CVE-2020-29509

creationtimestamp| type| source ---|---|--- 2022-06-29 03:35:24+00:00| seen| https://t.me/CyberSecurityTechnologies/2330 2026-03-12 17:51:31+00:00| seen| https://gist.github.com/russellhaering/64eb0dc5c1338ee07bc1947745368066...

9.8CVSS7.3AI score0.02081EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/03/24 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-1678)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.02369EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/03/24 12:0 a.m.31 views

EulerOS 2.0 SP5 : golang (EulerOS-SA-2021-1678)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection.CVE-2020-28366 - Go before 1.14.12 and 1.15.x before 1.15.5 allows Argument...

9.8CVSS6.8AI score0.02369EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.38 views

EulerOS Virtualization 3.0.6.6 : golang (EulerOS-SA-2021-1480)

According to the versions of the golang packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Go before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection. CVE-2020-28366 - Go before 1.14.12 and 1.15.x before 1.15.5...

9.8CVSS6.8AI score0.02369EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2021/01/08 12:0 a.m.23 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2021-1006)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.02369EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2021/01/04 12:0 a.m.43 views

EulerOS 2.0 SP9 : golang (EulerOS-SA-2021-1006)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The encoding/xml package in Go all versions does not correctly preserve the semantics of attribute namespace prefixes during tokenization...

9.8CVSS6.8AI score0.02369EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2021/01/04 12:0 a.m.38 views

EulerOS 2.0 SP9 : golang (EulerOS-SA-2021-1025)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The encoding/xml package in Go all versions does not correctly preserve the semantics of attribute namespace prefixes during tokenization...

9.8CVSS6.8AI score0.02369EPSS
Exploits0References6
NVD
NVD
added 2020/12/14 8:15 p.m.30 views

CVE-2020-29509

The encoding/xml package in Go all versions does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications...

9.8CVSS9.3AI score0.02081EPSS
Exploits0References2
CVE
CVE
added 2020/12/14 8:2 p.m.249 views

CVE-2020-29509

CVE-2020-29509 affects the Go encoding/xml package (all versions) where tokenization round-trips do not preserve attribute namespace prefixes, enabling inputs that behave inconsistently across processing stages in affected downstream applications. Connected sources confirm the vulnerability in Go...

9.8CVSS6.1AI score0.02081EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder