4684 matches found
GO-2023-2075 Kiali content spoofing vulnerability in github.com/kiali/kiali
Kiali content spoofing vulnerability in github.com/kiali/kiali...
GO-2023-2063 HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault
HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault...
GO-2023-2069 Croc may expose secret to local users in github.com/schollz/croc
Croc may expose secret to local users in github.com/schollz/croc...
GO-2023-2080 Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium
Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium...
GO-2023-2051 Answer Missing Authentication for Critical Function in github.com/answerdev/answer
Answer Missing Authentication for Critical Function in github.com/answerdev/answer...
GO-2023-2088 Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability in github.com/hashicorp/vault
Hashicorp Vault Incorrect Permission Assignment for Critical Resource vulnerability in github.com/hashicorp/vault...
GO-2023-2078 Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium
Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium...
GO-2023-2084 OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga
OpenFGA Vulnerable to DoS from circular relationship definitions in github.com/openfga/openfga...
GO-2023-2079 Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium
Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium...
GO-2023-2067 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input in github.com/contribsys/faktory
Faktory Web Dashboard can lead to denial of serviceDOS via malicious user input in github.com/contribsys/faktory...
GO-2023-2085 Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd
Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server in github.com/argoproj/argo-cd...
GO-2023-2070 Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc...
GO-2023-2065 Cross-Site Request Forgery (CSRF) in usememos/memos in github.com/usememos/memos
Cross-Site Request Forgery CSRF in usememos/memos in github.com/usememos/memos...
GO-2023-2053 matrix-media-repo: Unsafe media served inline on download endpoints in github.com/turt2live/matrix-media-repo
matrix-media-repo: Unsafe media served inline on download endpoints in github.com/turt2live/matrix-media-repo...
GO-2023-2068 Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc...
GO-2023-2066 NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server
NATS nats-server allows directory traversal via unintended path to a management action in github.com/nats-io/nats-server...
GO-2023-2028 OpenFGA Authorization Bypass in github.com/openfga/openfga
OpenFGA Authorization Bypass in github.com/openfga/openfga...
GO-2023-2049 Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd
Argo CD cluster secret might leak in cluster details page in github.com/argoproj/argo-cd...
GO-2023-2050 Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd
Argo CD repo-server Denial of Service vulnerability in github.com/argoproj/argo-cd...
GO-2023-2005 1Panel Arbitrary File Download vulnerability in github.com/1Panel-dev/1Panel
1Panel Arbitrary File Download vulnerability in github.com/1Panel-dev/1Panel...
GO-2023-2011 Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading in github.com/yaklang/yaklang
Yaklang Plugin's Fuzztag Component Allows Unauthorized Local File Reading in github.com/yaklang/yaklang...
GO-2023-1997 Answer Missing Authorization vulnerability in github.com/answerdev/answer
Answer Missing Authorization vulnerability in github.com/answerdev/answer...
GO-2023-2004 1Panel O&M management panel has a background arbitrary file reading vulnerability in github.com/1Panel-dev/1Panel
1Panel O&M management panel has a background arbitrary file reading vulnerability in github.com/1Panel-dev/1Panel...
GO-2023-2025 Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User in github.com/gravitl/netmaker...
GO-2023-2023 Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker
Netmaker IDOR Allows User to Update Other User's Password in github.com/gravitl/netmaker...
GO-2023-2012 lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files in github.com/treeverse/lakefs
lakeFS vulnerable to Arbitrary JavaScript Injection via Direct Link to HTML Files in github.com/treeverse/lakefs...
GO-2023-2018 Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd
Argo CD web terminal session doesn't expire in github.com/argoproj/argo-cd...
GO-2023-2036 usememos/memos vulnerable to privilege escalation in github.com/usememos/memos
usememos/memos vulnerable to privilege escalation in github.com/usememos/memos...
GO-2023-2014 Woodpecker does not validate webhook before changing any data in github.com/woodpecker-ci/woodpecker
Woodpecker does not validate webhook before changing any data in github.com/woodpecker-ci/woodpecker...
GO-2023-2001 Answer has Weak Password Requirements in github.com/answerdev/answer
Answer has Weak Password Requirements in github.com/answerdev/answer...
GO-2023-2038 Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos
Account TakeOver Due to Improper Handling of JWT Tokens in usememos/memos in github.com/usememos/memos...
GO-2023-2020 Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager...
GO-2023-2026 CasaOS Command Injection vulnerability in github.com/IceWhaleTech/CasaOS
CasaOS Command Injection vulnerability in github.com/IceWhaleTech/CasaOS...
GO-2023-2022 Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker
Netmaker has Hardcoded DNS Secret Key in github.com/gravitl/netmaker...
GO-2023-1999 Gitea erroneous repo clones in code.gitea.io/gitea
Gitea erroneous repo clones in code.gitea.io/gitea...
GO-2023-2006 1Panel arbitrary file write vulnerability in github.com/1Panel-dev/1Panel
1Panel arbitrary file write vulnerability in github.com/1Panel-dev/1Panel...
GO-2023-1993 Helm Improper Certificate Validation in helm.sh/helm
Helm Improper Certificate Validation in helm.sh/helm...
GO-2023-1996 Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer
Answer Insufficient Session Expiration vulnerability in github.com/answerdev/answer...
GO-2023-1977 Kubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes
Kubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes...
GO-2023-1961 Minikube RCE via DNS Rebinding in k8s.io/minikube
Minikube RCE via DNS Rebinding in k8s.io/minikube...
GO-2023-1986 HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault
HashiCorp Vault and Vault Enterprise vulnerable to user enumeration in github.com/hashicorp/vault...
GO-2023-1979 Denial of service from large image in github.com/crossplane/crossplane
Denial of service from large image in github.com/crossplane/crossplane...
GO-2023-1955 Dapr API token authentication bypass in HTTP endpoints in github.com/dapr/dapr
Dapr API token authentication bypass in HTTP endpoints in github.com/dapr/dapr...
GO-2023-1965 Ineffective privileges drop when requesting container network in github.com/apptainer/apptainer
Ineffective privileges drop when requesting container network in github.com/apptainer/apptainer...
GO-2023-1973 Rancher Access Control Vulnerability in github.com/rancher/rancher
Rancher Access Control Vulnerability in github.com/rancher/rancher...
GO-2023-1985 Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes
Kubernetes in OpenShift3 Access Control Misconfiguration in k8s.io/kubernetes...
GO-2023-1982 Gophish vulnerable to Server-Side Request Forgery in github.com/gophish/gophish
Gophish vulnerable to Server-Side Request Forgery in github.com/gophish/gophish...
GO-2023-1971 Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea
Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea...
GO-2023-1980 Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane
Possible image tampering from missing image validation for Packages in github.com/crossplane/crossplane...