Denial Of Service (DoS)

github.com/moby/moby is vulnerable to denial of service DoS attacks. The vulnerability exists when a large number of CPU units is provided which causes a DoS attack when the value is used...

Denial Of Service (DoS)

github.com/golang/net is vulnerable to denial of service. A panic: runtime error occurs in inBodyIM in parse.go when the html.Parse is called with an unclosed tag, resulting in a denial of service condition...

Denial Of Service (DoS)

github.com/golang/net is vulnerable to a denial of service DoS attack. The library does not properly handle special TokenTypes when parsed during the in frameset insertion mode, causing a panic: runtime error that can crash the application...

Denial Of Service (DoS)

github.com/nanomsg/mangos is vulnerable to denial of service. The websocket module does not limit the size of messages which would allow an attacker to submit large messages and cause a denial of service condition on the server...

Cross-site Scripting (XSS)

github.com/portainer/portainer is vulnerable to cross-site scripting XSS attacks. The library does not use HTTP Secure Headers, allowing a malicious user to inject and execute arbitrary Javascript through the Team Name field...

Path Traversal

github.com/openshift/osin is vulnerable to path traversal. The vulnerability exists because it does not properly validate the redirect URL, allowing access to sensitive files...

Open Redirect

github.com/s-gv/orangeforum is susceptible to open redirect attacks. The attacks exist because views/auth.go does not properly handle the redirectURL parameter in LoginHandler and LogoutHandler, allowing an attacker to create a link to redirect users to a malicious webpage...

Directory Traversal

github.com/golang/gddo is vulnerable to directory traversal attacks. The vulnerability exists due to the tags in the packages that are fetched by github.com/golang/gddo, allowing directory traversal attacks...

Remote Code Execution (RCE)

github.com/src-d/go-git is vulnerable to remote code execution RCE attacks. A malicious user can pass a .gitmodules file to the application to cause arbitrary code to be executed on a target machine that runs the git clone --recurse-submodules command. This is related to CVE-2018-11235...

Cross-Site Scripting (XSS)

github.com/go-gitea/gitea is susceptible to cross-site scripting XSS attacks. The search query and wiki page title parameters are not escaped properly, allowing an attacker to inject and execute arbitrary code through it...

Cross-site Scripting (XSS)

github.com/grafana/grafana is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary Javascript through HTML links on the dashboard...

Cross-site Request Forgery (CSRF)

github.com/coreos/etcd is vulnerable to cross-site request forgery CSRF attacks. The vulnerability exists as there are no host whitelists in place to prevent unauthorized websites from sending unauthorized POST requests to the etcd server...

DNS Rebinding

github.com/coreos/etcd is vulnerable to DNS rebinding. The vulnerability exists because it does not prevent the attacker to use its DNS records to direct to localhost, and trick the browser into sending requests to localhost or any other address...

Information Disclosure

github.com/ory/fosite is vulnerable to information disclosure. The vulnerability exists as the request body may contain client secrets to be exposed when POST-body based client authentication is enabled...

Arbitrary Code Execution

github.com/golang/go is vulnerable to arbitrary code execution attacks. The application does not filter the compiler flag variables -fplugin= and -plugin= when the go get command is run, allowing a malicious user to inject and execute arbitrary code by loading compiler plugins...

Access Restriction Bypass

github.com/snapcore/snapd is vulnerable to access restriction bypass. The match arguments are not made when the snap logs command is made from a call to journalctl allowing attackers to bypass systemd-journald's access restrictions...

Directory Traversal

github.com/astaxie/beego is vulnerable to directory traversal attacks. The library does not properly sanitize URL paths, allowing a malicious user to gain access to sensitive information...

POODLE Attack

crypto/tls in github.com/golang/go is vulnerable to the POODLE attack. The vulnerability exists due to the default SSLv3 fallback configuration in crypto/tls...

Infinite Redirection Loop

github.com/golang/gddo is vulnerable to infinite redirection loop. The weakness exist as TLS is removed before reaching gddo-server, causing an infinite loop that redirects to https...

Cross-site Scripting (XSS)

github.com/koding/koding is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary Javascript through the status bar filepath variable...