4692 matches found
GO-2022-1239 usememos/memos Improper Authentication vulnerability in github.com/usememos/memos
usememos/memos Improper Authentication vulnerability in github.com/usememos/memos...
GO-2022-1261 usememos/memos Improper Access Control vulnerability in github.com/usememos/memos
usememos/memos Improper Access Control vulnerability in github.com/usememos/memos...
GO-2022-1219 usememos/memos Denial of Service vulnerability in github.com/usememos/memos
usememos/memos Denial of Service vulnerability in github.com/usememos/memos...
GO-2022-1236 usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos
usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos...
GO-2022-1250 usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos
usememos/memos Cross-Site Request Forgery vulnerability in github.com/usememos/memos...
GO-2022-1252 usememos/memos Improper Access Control vulnerability in github.com/usememos/memos
usememos/memos Improper Access Control vulnerability in github.com/usememos/memos...
GO-2022-1248 usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos
usememos/memos vulnerable to Improper Authorization in github.com/usememos/memos...
GO-2022-1235 usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos
usememos/memos has Insufficient Granularity of Access Control in github.com/usememos/memos...
GO-2022-1240 usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos
usememos/memos vulnerable to Improper Verification of Source of a Communication Channel in github.com/usememos/memos...
GO-2022-1215 usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos
usememos/memos Authorization Bypass Through User-Controlled Key vulnerability in github.com/usememos/memos...
GO-2022-1218 usememos/memos Improper Access Control vulnerability in github.com/usememos/memos
usememos/memos Improper Access Control vulnerability in github.com/usememos/memos...
GO-2022-1192 usememos/memos missing Secure cookie attribute in github.com/usememos/memos
usememos/memos missing Secure cookie attribute in github.com/usememos/memos...
GO-2022-1179 OpenFGA Authorization Bypass in github.com/openfga/openfga
OpenFGA Authorization Bypass in github.com/openfga/openfga...
GO-2022-1205 usememos/memos vulnerable to improper access control in github.com/usememos/memos
usememos/memos vulnerable to improper access control in github.com/usememos/memos...
GO-2022-1191 usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos
usememos/memos vulnerable to account takeover due to improper access control in github.com/usememos/memos...
GO-2022-1204 Yapscan's report receiver server vulnerable to path traversal and log injection in github.com/fkie-cad/yapscan
Yapscan's report receiver server vulnerable to path traversal and log injection in github.com/fkie-cad/yapscan...
GO-2022-1206 CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o
CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation in github.com/cri-o/cri-o...
GO-2022-1171 Alist vulnerable to Path Traversal in github.com/alist-org/alist
Alist vulnerable to Path Traversal in github.com/alist-org/alist...
GO-2022-1160 Amazon CloudWatch Agent for Windows has Privilege Escalation Vector in github.com/aws/amazon-cloudwatch-agent
Amazon CloudWatch Agent for Windows has Privilege Escalation Vector in github.com/aws/amazon-cloudwatch-agent...
GO-2022-1164 csaf-poc/csaf_distribution Cross-site Scripting vulnerability in github.com/csaf-poc/csaf_distribution
csaf-poc/csafdistribution Cross-site Scripting vulnerability in github.com/csaf-poc/csafdistribution...
GO-2022-1190 usememos/memos vulnerable to improper authorization in github.com/usememos/memos
usememos/memos vulnerable to improper authorization in github.com/usememos/memos...
GO-2022-1181 AAD Pod Identity obtaining token with backslash in github.com/Azure/aad-pod-identity
AAD Pod Identity obtaining token with backslash in github.com/Azure/aad-pod-identity...
GO-2022-1208 gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server
gotify/server vulnerable to Cross-site Scripting in the application image file upload in github.com/gotify/server...
GO-2022-1216 usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos
usememos/memos vulnerable to stored Cross-site Scripting in github.com/usememos/memos...
GO-2022-1217 usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos
usememos/memos makes Incorrect Use of Privileged APIs in github.com/usememos/memos...
GO-2022-1189 usememos/memos vulnerable to stored cross-site scripting (XSS) in github.com/usememos/memos
usememos/memos vulnerable to stored cross-site scripting XSS in github.com/usememos/memos...
GO-2022-1212 pastebinit Path Traversal vulnerability in github.com/jessfraz/pastebinit
pastebinit Path Traversal vulnerability in github.com/jessfraz/pastebinit...
GO-2022-1200 Elrond-GO processing: fallback search of SCRs when not found in the main cache in github.com/ElrondNetwork/elrond-go
Elrond-GO processing: fallback search of SCRs when not found in the main cache in github.com/ElrondNetwork/elrond-go...
GO-2022-1161 AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist
AList vulnerable to Improper Preservation of Permissions in github.com/alist-org/alist...
GO-2022-1135 Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule
Capsule vulnerable to privilege escalation by ServiceAccount deployed in a Tenant Namespace in github.com/clastix/capsule...
GO-2022-1081 OpenFGA Authorization Bypass in github.com/openfga/openfga
OpenFGA Authorization Bypass in github.com/openfga/openfga...
GO-2022-1107 Container build can leak any path on the host into the container in github.com/docker/docker
Container build can leak any path on the host into the container in github.com/docker/docker...
GO-2022-1151 Buildah (as part of Podman) vulnerable to Link Following in github.com/containers/podman
Buildah as part of Podman vulnerable to Link Following in github.com/containers/podman...
GO-2022-1138 owncast is vulnerable to SQL Injection in github.com/owncast/owncast
owncast is vulnerable to SQL Injection in github.com/owncast/owncast...
GO-2022-1154 Traefik may display authorization header in the debug logs in github.com/traefik/traefik
Traefik may display authorization header in the debug logs in github.com/traefik/traefik...
GO-2022-1152 Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik
Traefik routes exposed with an empty TLSOption in github.com/traefik/traefik...
GO-2022-1089 OctoRPKI crashes when max iterations is reached in github.com/cloudflare/cfrpki
OctoRPKI crashes when max iterations is reached in github.com/cloudflare/cfrpki...
GO-2022-1132 Grafana's default installation of `synthetic-monitoring-agent` exposes sensitive information in github.com/grafana/synthetic-monitoring-agent
Grafana's default installation of synthetic-monitoring-agent exposes sensitive information in github.com/grafana/synthetic-monitoring-agent...
GO-2022-1106 HashiCorp Nomad vulnerable to Insufficient Session Expiration in github.com/hashicorp/nomad
HashiCorp Nomad vulnerable to Insufficient Session Expiration in github.com/hashicorp/nomad...
GO-2022-1099 OpenFGA Authorization Bypass in github.com/openfga/openfga
OpenFGA Authorization Bypass in github.com/openfga/openfga...
GO-2022-1120 Tailscale Windows daemon is vulnerable to RCE via CSRF in tailscale.com
Tailscale Windows daemon is vulnerable to RCE via CSRF in tailscale.com...
GO-2022-1153 Casdoor arbitrary file deletion vulnerability via uploadFile function in github.com/casdoor/casdoor
Casdoor arbitrary file deletion vulnerability via uploadFile function in github.com/casdoor/casdoor...
GO-2022-1079 OpenFGA subject to Information Disclosure via streamed-list-objects endpoint in github.com/openfga/openfga
OpenFGA subject to Information Disclosure via streamed-list-objects endpoint in github.com/openfga/openfga...
GO-2022-1119 Tailscale daemon is vulnerable to information disclosure via CSRF in tailscale.com
Tailscale daemon is vulnerable to information disclosure via CSRF in tailscale.com...
GO-2022-1105 HashiCorp Nomad vulnerable to non-sensitive metadata exposure in github.com/hashicorp/nomad
HashiCorp Nomad vulnerable to non-sensitive metadata exposure in github.com/hashicorp/nomad...
GO-2022-1121 Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul
Missing Authorization in HashiCorp Consul in github.com/hashicorp/consul...
GO-2022-1147 containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd
containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd...
GO-2022-1080 OpenFGA Authorization Bypass via tupleset wildcard in github.com/openfga/openfga
OpenFGA Authorization Bypass via tupleset wildcard in github.com/openfga/openfga...
GO-2022-1100 Vela Insecure Defaults in github.com/go-vela/server
Vela Insecure Defaults in github.com/go-vela/server...
GO-2022-1066 Potential inter-blockchain communication (IBC) protocol compromise via "Dragonberry" vulnerability in cheqd in github.com/cheqd/cheqd-node
Potential inter-blockchain communication IBC protocol compromise via "Dragonberry" vulnerability in cheqd in github.com/cheqd/cheqd-node...