4632 matches found
GO-2023-1662 Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Stored Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1685 HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File in github.com/hashicorp/vault
HashiCorp Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File in github.com/hashicorp/vault...
GO-2023-1671 Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com
Non-interactive Tailscale SSH sessions on FreeBSD may use the effective group ID of the tailscaled process in tailscale.com...
GO-2023-1660 Answer vulnerable to Business Logic Errors in github.com/answerdev/answer
Answer vulnerable to Business Logic Errors in github.com/answerdev/answer...
GO-2023-1619 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1612 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1613 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1633 Nomad Job Submitter Privilege Escalation Using Workload Identity in github.com/hashicorp/nomad
Nomad Job Submitter Privilege Escalation Using Workload Identity in github.com/hashicorp/nomad...
GO-2023-1620 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1590 GoPistolet vulnerable to Improper Resource Shutdown or Release in github.com/gopistolet/gopistolet
GoPistolet vulnerable to Improper Resource Shutdown or Release in github.com/gopistolet/gopistolet...
GO-2023-1618 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1592 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1622 Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation
Constellation allows Emergency shell access during initramfs boot phase in github.com/edgelesssys/constellation...
GO-2023-1614 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1615 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1607 Yapscan Denial of Service vulnerability in report server in github.com/fkie-cad/yapscan
Yapscan Denial of Service vulnerability in report server in github.com/fkie-cad/yapscan...
GO-2023-1629 Kubernetes vulnerable to validation bypass in k8s.io/kubernetes
Kubernetes vulnerable to validation bypass in k8s.io/kubernetes...
GO-2023-1617 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1596 Gogs OS Command Injection vulnerability in gogs.io/gogs
Gogs OS Command Injection vulnerability in gogs.io/gogs...
GO-2023-1616 Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer
Answer vulnerable to Cross-site Scripting in github.com/answerdev/answer...
GO-2023-1639 Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul
Consul Server Panic when Ingress and API Gateways Configured with Peering Connections in github.com/hashicorp/consul...
GO-2023-1628 Kubernetes vulnerable to path traversal in k8s.io/kubernetes
Kubernetes vulnerable to path traversal in k8s.io/kubernetes...
GO-2023-1630 Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy
Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy...
GO-2023-1627 Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc
Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc...
GO-2023-1542 Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following in github.com/pterodactyl/wings
Pterodactyl Wings contains UNIX Symbolic Link Symlink Following in github.com/pterodactyl/wings...
GO-2023-1554 Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer
Answer contains Cross-site Scripting vulnerability in github.com/answerdev/answer...
GO-2023-1520 JWT audience claim is not verified in github.com/argoproj/argo-cd
JWT audience claim is not verified in github.com/argoproj/argo-cd...
GO-2023-1524 Initial debug-host handler implementation could leak information and facilitate denial of service in fortio.org/proxy
Initial debug-host handler implementation could leak information and facilitate denial of service in fortio.org/proxy...
GO-2023-1552 Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer
Answer has Cross-site Scripting vulnerability in github.com/answerdev/answer...
GO-2023-1527 Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor
Velociraptor vulnerable to Missing Authorization in www.velocidex.com/golang/velociraptor...
GO-2023-1550 Answer contains Improper Access Control vulnerability in github.com/answerdev/answer
Answer contains Improper Access Control vulnerability in github.com/answerdev/answer...
GO-2023-1544 Podman has Files or Directories Accessible to External Parties in github.com/containers/libpod
Podman has Files or Directories Accessible to External Parties in github.com/containers/libpod...
GO-2023-1555 Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following resulting in deletion of files and directories on the host system in github.com/pterodactyl/wings
Pterodactyl Wings contains UNIX Symbolic Link Symlink Following resulting in deletion of files and directories on the host system in github.com/pterodactyl/wings...
GO-2023-1553 Answer vulnerable to Race Condition in github.com/answerdev/answer
Answer vulnerable to Race Condition in github.com/answerdev/answer...
GO-2023-1541 Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer
Cross-site scripting vulnerability found in answerdev/answer in github.com/answerdev/answer...
GO-2023-1583 User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation
User data in TPM attestation vulnerable to MITM in github.com/edgelesssys/constellation...
GO-2023-1582 Privilege escalation in MOSN in mosn.io/mosn
Privilege escalation in MOSN in mosn.io/mosn...
GO-2023-1560 Path Traversal in gin-vue-admin in github.com/flipped-aurora/gin-vue-admin
Path Traversal in gin-vue-admin in github.com/flipped-aurora/gin-vue-admin...
GO-2023-1543 mrpack-install vulnerable to path traversal with dependency in github.com/nothub/mrpack-install
mrpack-install vulnerable to path traversal with dependency in github.com/nothub/mrpack-install...
GO-2023-1551 Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer
Answer subject to Cross-site Scripting vulnerability in github.com/answerdev/answer...
GO-2023-1512 Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd
Controller reconciles apps outside configured namespaces when sharding is enabled in github.com/argoproj/argo-cd...
GO-2023-1533 Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in github.com/anchore/syft
Credential disclosure in syft when SYFTATTESTPASSWORD environment variable set in github.com/anchore/syft...
GO-2023-1577 Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd
Users with any cluster secret update access may update out-of-bounds cluster secrets in github.com/argoproj/argo-cd...
GO-2023-1581 Uncontrolled Resource Consumption in Hashicorp Nomad in github.com/hashicorp/nomad
Uncontrolled Resource Consumption in Hashicorp Nomad in github.com/hashicorp/nomad...
GO-2023-1377 GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops
GitOps Run allows for Kubernetes workload injection in github.com/weaveworks/weave-gitops...
GO-2023-1388 Gitops Run insecure communication in github.com/weaveworks/weave-gitops
Gitops Run insecure communication in github.com/weaveworks/weave-gitops...
GO-2023-1509 Path Traversal in github.com/go-sonic/sonic
Path Traversal in github.com/go-sonic/sonic...
GO-2023-1285 sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos
sememos/memos vulnerable to Improper Handling of Values in github.com/usememos/memos...