4045 matches found
GO-2022-0505 Insecure cookies in Openshift Origin in github.com/openshift/origin
Insecure cookies in Openshift Origin in github.com/openshift/origin...
GO-2022-0495 DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd
DoS through large manifest files in Argo CD in github.com/argoproj/argo-cd...
GO-2022-0480 Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o
Node DOS by way of memory exhaustion through ExecSync request in CRI-O in github.com/cri-o/cri-o...
GO-2022-0473 Cross site scripting via cookies in gogs in gogs.io/gogs
Cross site scripting via cookies in gogs in gogs.io/gogs...
GO-2022-0458 Improper Privilege Management in Cilium in github.com/cilium/cilium
Improper Privilege Management in Cilium in github.com/cilium/cilium...
GO-2022-0491 Configuration API in EdgeXFoundry 2.1.0 and earlier exposes message bus credentials to local unauthenticated users in github.com/edgexfoundry/app-functions-sdk-go
Configuration API in EdgeXFoundry 2.1.0 and earlier exposes message bus credentials to local unauthenticated users in github.com/edgexfoundry/app-functions-sdk-go...
GO-2022-0482 containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd
containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd...
GO-2022-0416 Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman
Podman's default inheritable capabilities for linux container not empty in github.com/containers/podman...
GO-2022-0413 Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium
Exposure of Sensitive Information in Pomerium in github.com/pomerium/pomerium...
GO-2022-0455 Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd
Argo CD will blindly trust JWT claims if anonymous access is enabled in github.com/argoproj/argo-cd...
GO-2022-0410 Local directory executable lookup in sops (Windows-only) in go.mozilla.org/sops
Local directory executable lookup in sops Windows-only in go.mozilla.org/sops...
GO-2022-0426 Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o
Incorrect Default Permissions in CRI-O in github.com/cri-o/cri-o...
GO-2022-0424 On Windows, `git-sizer` might run a `git` executable within the repository being analyzed in github.com/github/git-sizer
On Windows, git-sizer might run a git executable within the repository being analyzed in github.com/github/git-sizer...
GO-2022-0429 Smokescreen SSRF via deny list bypass in github.com/stripe/smokescreen
Smokescreen SSRF via deny list bypass in github.com/stripe/smokescreen...
GO-2022-0449 Server-Side Request Forgery in charm in github.com/charmbracelet/charm
Server-Side Request Forgery in charm in github.com/charmbracelet/charm...
GO-2022-0442 Arbitrary file deletion in gitea in code.gitea.io/gitea
Arbitrary file deletion in gitea in code.gitea.io/gitea...
GO-2022-0407 Listing of upload directory contents possible in github.com/ThomasLeister/prosody-filer
Listing of upload directory contents possible in github.com/ThomasLeister/prosody-filer...
GO-2022-0453 Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd
Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server in github.com/argoproj/argo-cd...
GO-2022-0454 Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd
Login screen allows message spoofing if SSO is enabled in github.com/argoproj/argo-cd...
GO-2022-0447 Improper path handling in kustomization files allows path traversal in github.com/fluxcd/flux2
Improper path handling in kustomization files allows path traversal in github.com/fluxcd/flux2...
GO-2022-0440 Woodpecker allows cross-site scripting (XSS) via build logs in github.com/woodpecker-ci/woodpecker
Woodpecker allows cross-site scripting XSS via build logs in github.com/woodpecker-ci/woodpecker...
GO-2022-0451 Ignition config accessible to unprivileged software on VMware in github.com/coreos/ignition
Ignition config accessible to unprivileged software on VMware in github.com/coreos/ignition...
GO-2022-0448 Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2
Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2...
GO-2022-0456 DoS via malicious p2p message in Go Ethereum in github.com/ethereum/go-ethereum
DoS via malicious p2p message in Go Ethereum in github.com/ethereum/go-ethereum...
GO-2022-0392 Denial of service in go-ethereum due to CVE-2020-28362 in github.com/ethereum/go-ethereum
Denial of service in go-ethereum due to CVE-2020-28362 in github.com/ethereum/go-ethereum...
GO-2022-0406 Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper
Possible bypass of token claim validation when OAuth2 Introspection caching is enabled in github.com/ory/oathkeeper...
GO-2022-0395 GitHub CLI can execute a git binary from the current directory in github.com/cli/cli
GitHub CLI can execute a git binary from the current directory in github.com/cli/cli...
GO-2022-0367 Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme in github.com/keep-network/keep-ecdsa
Incorrect validation of parties IDs leaks secret keys in Secret-sharing scheme in github.com/keep-network/keep-ecdsa...
GO-2022-0375 Improper Access Control in github.com/treeverse/lakefs
Improper Access Control in github.com/treeverse/lakefs...
GO-2022-0393 Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium
Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium...
GO-2022-0405 Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows
Potential privilege escalation on Kubernetes = v1.19 when the Argo Sever is run with --auth-mode=client in github.com/argoproj/argo-workflows...
GO-2022-0398 Import loops in account imports, nats-server DoS in github.com/nats-io/nats-server
Import loops in account imports, nats-server DoS in github.com/nats-io/nats-server...
GO-2022-0372 Subdomain Takeover in Interactsh server in github.com/projectdiscovery/interactsh
Subdomain Takeover in Interactsh server in github.com/projectdiscovery/interactsh...
GO-2022-0387 Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd
Helm OCI credentials leaked into Argo CD logs in github.com/argoproj/argo-cd...
GO-2022-0369 Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs
Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs...
GO-2022-0377 SSRF in repository migration in gogs.io/gogs
SSRF in repository migration in gogs.io/gogs...
GO-2022-0389 Unchecked hostname resolution could allow access to local network resources by users outside the local network in github.com/pterodactyl/wings
Unchecked hostname resolution could allow access to local network resources by users outside the local network in github.com/pterodactyl/wings...
GO-2022-0388 Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows
Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows...
GO-2022-0378 MD5 hash support in github.com/foxcpp/maddy
MD5 hash support in github.com/foxcpp/maddy...
GO-2022-0396 Devices resource list treated as a blacklist by default in github.com/opencontainers/runc
Devices resource list treated as a blacklist by default in github.com/opencontainers/runc...
GO-2022-0390 Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker
Moby Docker Engine started with non-empty inheritable Linux process capabilities in github.com/docker/docker...
GO-2022-0381 Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server
Import of incorrectly embargoed keys could cause early publication in github.com/google/exposure-notifications-server...
GO-2022-0358 Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd
Path traversal allows leaking out-of-bound files from Argo CD repo-server in github.com/argoproj/argo-cd...
GO-2022-0359 Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd
Improper access control allows admin privilege escalation in Argo CD in github.com/argoproj/argo-cd...
GO-2022-0353 Path Traversal in Gitea in code.gitea.io/gitea
Path Traversal in Gitea in code.gitea.io/gitea...
GO-2022-0325 Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik
Skip the router TLS configuration when the host header is an FQDN in github.com/traefik/traefik...
GO-2022-0315 Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea
Reuse of one time passwords allowed in Gitea in code.gitea.io/gitea...
GO-2022-0363 Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o
Sysctls applied to containers with host IPC or host network namespaces can affect the host in github.com/cri-o/cri-o...