Lucene search
+L

464 matches found

OSV
OSV
•added 2021/04/30 4:15 p.m.•21 views

CVE-2020-7731

This affects all versions 0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...

7.5CVSS7.1AI score0.01769EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/04/30 4:10 p.m.•44 views

CVE-2020-7731 Denial of Service (DoS)

This affects all versions 0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...

7.5CVSS7.5AI score0.01662EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/04/30 4:05 p.m.•8 views

CVE-2020-7731

This affects all versions 0.7.0 of package github.com/russellhaering/gosaml2. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...

7.5CVSS7.3AI score0.01662EPSS
SaveExploits0References4
OSV
OSV
•added 2021/04/14 8:04 p.m.•57 views

GO-2020-0048 Denial of service in github.com/antchfx/xmlquery

LoadURL does not check the Content-Type of loaded resources, which can cause a panic due to nil pointer deference if the loaded resource is not XML. If user supplied URLs are loaded, this may be used as a denial of service vector...

9.8CVSS9.1AI score0.01936EPSS
SaveExploits1References2
OSV
OSV
•added 2021/04/14 8:04 p.m.•19 views

GO-2020-0046 Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig

Due to a nil pointer dereference, a malformed XML Digital Signature can cause a panic during validation. If user supplied signatures are being validated, this may be used as a denial of service vector...

7.5CVSS7.2AI score0.01769EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/04/14 12:00 a.m.•7 views

PT-2021-12657 · Goxmldsig +1 · Goxmldsig +1

Name of the Vulnerable Software and Affected Versions: gosaml2 versions prior to 0.7.0 goxmldsig versions prior to 1.1.1 Description: The issue is caused by a nil-pointer dereference when validating malformed XML Digital Signatures, leading to a crash or panic. This can be used as a denial of...

7.5CVSS7.2AI score0.01769EPSS
SaveExploits1References18
Veracode
Veracode
•added 2020/12/18 10:28 a.m.•44 views

Denial Of Service (DoS)

crypto/ssh in github.com/golang/go is vulnerable to Denial Of Service DoS. The vulnerability is possible because of a nil pointer dereference in the component...

7.5CVSS7.2AI score0.03267EPSS
SaveExploits0References4Affected Software3
OSV
OSV
•added 2020/12/17 5:15 a.m.•13 views

DEBIAN-CVE-2020-29652

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...

7.5CVSS7.6AI score0.03267EPSS
SaveExploits0References1
OSV
OSV
•added 2020/12/17 5:15 a.m.•18 views

UBUNTU-CVE-2020-29652

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...

7.5CVSS7.2AI score0.03267EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/12/17 5:15 a.m.•54 views

CVE-2020-29652

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...

7.5CVSS7.1AI score0.03267EPSS
SaveExploits0References3
CVE
CVE
•added 2020/12/17 4:12 a.m.•803 views

CVE-2020-29652

CVE-2020-29652 : A nil pointer dereference in the golang.org/x/crypto/ssh component (affected through v0.0.0-20201203163018-be400aefbc4c for Go) can allow remote attackers to cause a denial of service against SSH servers. The Initial Description confirms this vulnerability, and connected IBM/IBM ...

7.5CVSS7.1AI score0.03267EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2020/12/17 4:12 a.m.•54 views

CVE-2020-29652

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...

7.5CVSS7.4AI score0.03267EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/09/16 12:00 a.m.•10 views

PT-2020-16128 · Xmlquery · Xmlquery

Name of the Vulnerable Software and Affected Versions: xmlquery versions prior to 1.3.1 Description: The issue allows attackers to cause a denial of service SIGSEGV or possibly have other unspecified impacts due to the lack of a check for whether a LoadURL response is in the XML format. This can...

9.8CVSS9.5AI score0.01936EPSS
SaveExploits1References13
Snyk
Snyk
•added 2020/09/07 12:22 p.m.•3 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. There is a crash on nil-pointer dereference caused by sending malformed XML signatures. Details Denial of Service DoS describes a family of attacks, all aimed at making a system inaccessible to its intended and...

7.5CVSS7AI score0.01662EPSS
SaveExploits0References2
OSV
OSV
•added 2020/08/23 2:15 p.m.•44 views

CVE-2020-7711

This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...

7.5CVSS7.5AI score0.01662EPSS
SaveExploits0References2
OSV
OSV
•added 2020/08/23 2:15 p.m.•8 views

DEBIAN-CVE-2020-7711

This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...

7.5CVSS7.3AI score0.01769EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2020/08/23 2:15 p.m.•6 views

CVE-2020-7711

This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...

7.5CVSS7.3AI score0.01769EPSS
SaveExploits1References3
OSV
OSV
•added 2020/08/23 2:15 p.m.•15 views

UBUNTU-CVE-2020-7711

This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...

7.5CVSS7.1AI score0.01769EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2020/08/23 1:35 p.m.•20 views

CVE-2020-7711

This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures...

7.5CVSS7.5AI score0.01769EPSS
SaveExploits1
Snyk
Snyk
•added 2020/08/23 12:15 p.m.•2 views

Denial of Service (DoS)

Overview github.com/russellhaering/goxmldsig is a XML Digital Signatures implemented in pure Go. Affected versions of this package are vulnerable to Denial of Service DoS. There is a crash on nil-pointer dereference caused by sending malformed XML signatures. Details Denial of Service DoS describ...

7.5CVSS7AI score0.01769EPSS
SaveExploits1References2
Rows per page
Query Builder