4684 matches found
GO-2022-0707 Grafana Authentication Bypass in github.com/grafana/grafana
Grafana Authentication Bypass in github.com/grafana/grafana...
GO-2022-0623 Invalid session token expiration in github.com/hashicorp/vault
Invalid session token expiration in github.com/hashicorp/vault...
GO-2022-0615 Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul
Hashicorp Consul HTTP health check endpoints returning an HTTP redirect may be abused as SSRF vector in github.com/hashicorp/consul...
GO-2022-0618 Hashicorp Vault Privilege Escalation Vulnerability in github.com/hashicorp/vault
Hashicorp Vault Privilege Escalation Vulnerability in github.com/hashicorp/vault...
GO-2022-0638 Information Exposure in Docker Engine in github.com/docker/docker
Information Exposure in Docker Engine in github.com/docker/docker...
GO-2022-0617 WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes
This report has been withdrawn from the Go vulnerability database with reason: "Low severity issue with no fix available or planned. Likely to cause false positives."...
GO-2022-0634 Hashicorp Nomad Information Exposure Through Environmental Variables in github.com/hashicorp/nomad
Hashicorp Nomad Information Exposure Through Environmental Variables in github.com/hashicorp/nomad...
GO-2022-0620 HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0 in github.com/hashicorp/vault
HashiCorp Vault underlying database had excessively broad filesystem permissions from v1.4.0 until v1.8.0 in github.com/hashicorp/vault...
GO-2022-0640 Arbitrary Code Execution in github.com/docker/docker
Arbitrary Code Execution in github.com/docker/docker...
GO-2022-0636 Man-in-the-Middle (MitM) in github.com/docker/docker
Man-in-the-Middle MitM in github.com/docker/docker...
GO-2022-0630 Arbitrary Code Execution in Docker in github.com/docker/docker
Arbitrary Code Execution in Docker in github.com/docker/docker...
GO-2022-0631 Hard coded cryptographic key in Kiali in github.com/kiali/kiali
Hard coded cryptographic key in Kiali in github.com/kiali/kiali...
GO-2022-0632 Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault in github.com/hashicorp/vault
Improper Removal of Sensitive Information Before Storage or Transfer in HashiCorp Vault in github.com/hashicorp/vault...
GO-2022-0612 Stored Cross-site Scripting in gitea in code.gitea.io/gitea
Stored Cross-site Scripting in gitea in code.gitea.io/gitea...
GO-2022-0609 Gitea Missing Authorization vulnerability in code.gitea.io/gitea
Gitea Missing Authorization vulnerability in code.gitea.io/gitea...
GO-2022-0616 Improper Privilege Management in Mattermost in github.com/mattermost/mattermost-server
Improper Privilege Management in Mattermost in github.com/mattermost/mattermost-server...
GO-2022-0625 Access Restriction Bypass in Docker in github.com/docker/docker
Access Restriction Bypass in Docker in github.com/docker/docker...
GO-2022-0611 HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault
HashiCorp Vault Incorrect Permission Assignment for Critical Resource in github.com/hashicorp/vault...
GO-2022-0626 Insufficient Session Expiration in Kiali in github.com/kiali/kiali
Insufficient Session Expiration in Kiali in github.com/kiali/kiali...
GO-2022-0622 Improper Privilege Management in HashiCorp Nomad in github.com/hashicorp/nomad
Improper Privilege Management in HashiCorp Nomad in github.com/hashicorp/nomad...
GO-2022-0641 Improper Authorization in github.com/containers/libpod
Improper Authorization in github.com/containers/libpod...
GO-2022-0578 Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault
Incorrect Privilege Assignment in HashiCorp Vault in github.com/hashicorp/vault...
GO-2022-0580 Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki in github.com/cloudflare/cfrpki
Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki in github.com/cloudflare/cfrpki...
GO-2022-0577 HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling in github.com/hashicorp/nomad
HashiCorp Nomad vulnerable to Allocation of Resources Without Limits or Throttling in github.com/hashicorp/nomad...
GO-2022-0593 HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul
HashiCorp Consul Privilege Escalation Vulnerability in github.com/hashicorp/consul...
GO-2022-0591 Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad
Privilege escalation in Hashicorp Nomad in github.com/hashicorp/nomad...
GO-2022-0585 Server-Side Request Forgery in Apache Traffic Control in github.com/apache/trafficcontrol
Server-Side Request Forgery in Apache Traffic Control in github.com/apache/trafficcontrol...
GO-2022-0606 Command Injection in CasaOS in github.com/IceWhaleTech/CasaOS
Command Injection in CasaOS in github.com/IceWhaleTech/CasaOS...
GO-2022-0597 Cross-site Scripting in Gogs in gogs.io/gogs
Cross-site Scripting in Gogs in gogs.io/gogs...
GO-2022-0595 Resource exhaustion in Mattermost in github.com/mattermost/mattermost-server
Resource exhaustion in Mattermost in github.com/mattermost/mattermost-server...
GO-2022-0590 HashiCorp Vault improper configuration of multi factor authentication in github.com/hashicorp/vault
HashiCorp Vault improper configuration of multi factor authentication in github.com/hashicorp/vault...
GO-2022-0602 Email relay in Apache Traffic Control in github.com/apache/trafficcontrol
Email relay in Apache Traffic Control in github.com/apache/trafficcontrol...
GO-2022-0604 Cross-site Scripting in Mattermost in github.com/mattermost/mattermost-server
Cross-site Scripting in Mattermost in github.com/mattermost/mattermost-server...
GO-2022-0599 Improper Control of a Resource Through its Lifetime in Mattermost in github.com/mattermost/mattermost-server
Improper Control of a Resource Through its Lifetime in Mattermost in github.com/mattermost/mattermost-server...
GO-2022-0576 Insecure plugin handling in Mattermost in github.com/mattermost/mattermost-server
Insecure plugin handling in Mattermost in github.com/mattermost/mattermost-server...
GO-2022-0608 Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o
Incorrect Permission Assignment for Critical Resource in CRI-O in github.com/cri-o/cri-o...
GO-2022-0579 Open redirect in Gitea in github.com/go-gitea/gitea
Open redirect in Gitea in github.com/go-gitea/gitea...
GO-2022-0583 Server-Side Request Forgery in gogs webhook in gogs.io/gogs
Server-Side Request Forgery in gogs webhook in gogs.io/gogs...
GO-2022-0584 Arbitrary file reads in HashiCorp Nomad in github.com/hashicorp/nomad
Arbitrary file reads in HashiCorp Nomad in github.com/hashicorp/nomad...
GO-2022-0600 HashiCorp Nomad Artifact Download Race Condition in github.com/hashicorp/nomad
HashiCorp Nomad Artifact Download Race Condition in github.com/hashicorp/nomad...
GO-2022-0573 Improper Authentication in HashiCorp Nomad in github.com/hashicorp/nomad
Improper Authentication in HashiCorp Nomad in github.com/hashicorp/nomad...
GO-2022-0566 SSRF in repository migration in gogs.io/gogs
SSRF in repository migration in gogs.io/gogs...
GO-2022-0518 Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd
Argo CD certificate verification is skipped for connections to OIDC providers in github.com/argoproj/argo-cd...
GO-2022-0517 Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd
Argo CD SSO users vulnerable to Cross-site Scripting in github.com/argoproj/argo-cd...
GO-2022-0559 HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul
HashiCorp Consul and Consul Enterprise 1.10.1 Txn.Apply endpoint allowed services to register proxies for other services, enabling access to service traffic. in github.com/hashicorp/consul...
GO-2022-0511 KubeEdge Cloud Stream and Edge Stream DoS from large stream message in github.com/kubeedge/kubeedge
KubeEdge Cloud Stream and Edge Stream DoS from large stream message in github.com/kubeedge/kubeedge...
GO-2022-0507 KubeEdge Edge ServiceBus module DoS in github.com/kubeedge/kubeedge
KubeEdge Edge ServiceBus module DoS in github.com/kubeedge/kubeedge...
GO-2022-0512 DoS in KubeEdge's Websocket Client in package Viaduct in github.com/kubeedge/kubeedge
DoS in KubeEdge's Websocket Client in package Viaduct in github.com/kubeedge/kubeedge...
GO-2022-0547 aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9 in sigs.k8s.io/aws-iam-authenticator
aws-iam-authenticator allow-listed IAM identity may be able to modify their username, escalate privileges before v0.5.9 in sigs.k8s.io/aws-iam-authenticator...