Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2020-20825

Malware in sbrugna...

7.5CVSS7.4AI score0.02342EPSS
SaveExploits0References15
osv_bit
osv_bit
•added 2024/03/06 11:07 a.m.•59 views

BIT-GOLANG-2020-28366 Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file...

7.5CVSS8.1AI score0.02342EPSS
SaveExploits0References6
osv_go
osv_go
•added 2022/07/28 5:24 p.m.•79 views

GO-2022-0475 Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

The go command may execute arbitrary code at build time when cgo is in use. This may occur when running go get on a malicious package, or any other command that builds untrusted code. This can be caused by malicious unquoted symbol name in a linked object file...

7.5CVSS8AI score0.02342EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2020/11/18 5:15 p.m.•43 views

CVE-2020-28366

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file...

7.5CVSS7.8AI score
SaveExploits0References5
Prion
Prion
•added 2020/11/18 5:15 p.m.•48 views

Code injection

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file...

5.1CVSS7.9AI score0.02342EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
•added 2020/11/18 5:15 p.m.•47 views

CVE-2020-28366

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file...

7.5CVSS7.7AI score0.02342EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2020/11/18 12:00 a.m.•56 views

CVE-2020-28366

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file...

7.5CVSS8.3AI score0.02342EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/11/18 12:00 a.m.•68 views

CVE-2020-28366 Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo

Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file...

8.1AI score0.02342EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2020/11/18 12:00 a.m.•43 views

CVE-2020-28366

Removed by vendor...

7.5CVSS7.4AI score0.02342EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/11/16 12:00 a.m.•5 views

PT-2020-16998

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.14.12 Go versions 1.15.x prior to 1.15.5 Description The issue allows for code injection in the go command when cgo is used, potentially leading to arbitrary code execution at build time. This can happen through a...

7.5CVSS0.02342EPSS
SaveExploits0References60
Rows per page
Query Builder