Логотип exploitDog
bind:"CVE-2025-47906" OR bind:"CVE-2025-58183"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2025-47906" OR bind:"CVE-2025-58183"

Количество 63

Количество 63

rocky логотип

RLSA-2025:22668

2 месяца назад

Moderate: go-toolset:rhel8 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2025-22668

2 месяца назад

ELSA-2025-22668: go-toolset:rhel8 security update (MODERATE)

EPSS: Низкий
ubuntu логотип

CVE-2025-47906

5 месяцев назад

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-47906

5 месяцев назад

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-47906

5 месяцев назад

If the PATH environment variable contains paths which are executables ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2025-58183

3 месяца назад

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2025-58183

3 месяца назад

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

CVSS3: 4.3
EPSS: Низкий
msrc логотип

CVE-2025-58183

3 месяца назад

Unbounded allocation when parsing GNU sparse map in archive/tar

CVSS3: 5.5
EPSS: Низкий
debian логотип

CVE-2025-58183

3 месяца назад

tar.Reader does not set a maximum size on the number of sparse region ...

CVSS3: 4.3
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0298-1

15 дней назад

Security update for go1.25-openssl

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2026:0297-1

15 дней назад

Security update for go1.25-openssl

EPSS: Низкий
rocky логотип

RLSA-2025:22005

2 месяца назад

Moderate: go-rpm-macros security update

EPSS: Низкий
github логотип

GHSA-gwrf-jf3h-w649

5 месяцев назад

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

CVSS3: 6.5
EPSS: Низкий
oracle-oval логотип

ELSA-2025-22005

3 месяца назад

ELSA-2025-22005: go-rpm-macros security update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2025-11595

5 месяцев назад

Уязвимость языка программирования Go, связанная с неправильной проверкой входных данных, позволяющая нарушителю повысить свои привилегии

CVSS3: 6.5
EPSS: Низкий
rocky логотип

RLSA-2025:23948

около 2 месяцев назад

Moderate: grafana security update

EPSS: Низкий
rocky логотип

RLSA-2025:23374

около 2 месяцев назад

Moderate: container-tools:rhel8 security update

EPSS: Низкий
rocky логотип

RLSA-2025:23326

около 2 месяцев назад

Moderate: skopeo security update

EPSS: Низкий
rocky логотип

RLSA-2025:23325

около 2 месяцев назад

Moderate: podman security update

EPSS: Низкий
rocky логотип

RLSA-2025:23295

около 2 месяцев назад

Moderate: podman security update

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
rocky логотип
RLSA-2025:22668

Moderate: go-toolset:rhel8 security update

2 месяца назад
oracle-oval логотип
ELSA-2025-22668

ELSA-2025-22668: go-toolset:rhel8 security update (MODERATE)

2 месяца назад
ubuntu логотип
CVE-2025-47906

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

CVSS3: 6.5
0%
Низкий
5 месяцев назад
nvd логотип
CVE-2025-47906

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

CVSS3: 6.5
0%
Низкий
5 месяцев назад
debian логотип
CVE-2025-47906

If the PATH environment variable contains paths which are executables ...

CVSS3: 6.5
0%
Низкий
5 месяцев назад
ubuntu логотип
CVE-2025-58183

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

CVSS3: 4.3
0%
Низкий
3 месяца назад
nvd логотип
CVE-2025-58183

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files. A maliciously-crafted archive containing a large number of sparse regions can cause a Reader to read an unbounded amount of data from the archive into memory. When reading from a compressed source, a small compressed input can result in large allocations.

CVSS3: 4.3
0%
Низкий
3 месяца назад
msrc логотип
CVE-2025-58183

Unbounded allocation when parsing GNU sparse map in archive/tar

CVSS3: 5.5
0%
Низкий
3 месяца назад
debian логотип
CVE-2025-58183

tar.Reader does not set a maximum size on the number of sparse region ...

CVSS3: 4.3
0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2026:0298-1

Security update for go1.25-openssl

15 дней назад
suse-cvrf логотип
SUSE-SU-2026:0297-1

Security update for go1.25-openssl

15 дней назад
rocky логотип
RLSA-2025:22005

Moderate: go-rpm-macros security update

0%
Низкий
2 месяца назад
github логотип
GHSA-gwrf-jf3h-w649

If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", ".", and ".."), can result in the binaries listed in the PATH being unexpectedly returned.

CVSS3: 6.5
0%
Низкий
5 месяцев назад
oracle-oval логотип
ELSA-2025-22005

ELSA-2025-22005: go-rpm-macros security update (MODERATE)

3 месяца назад
fstec логотип
BDU:2025-11595

Уязвимость языка программирования Go, связанная с неправильной проверкой входных данных, позволяющая нарушителю повысить свои привилегии

CVSS3: 6.5
0%
Низкий
5 месяцев назад
rocky логотип
RLSA-2025:23948

Moderate: grafana security update

0%
Низкий
около 2 месяцев назад
rocky логотип
RLSA-2025:23374

Moderate: container-tools:rhel8 security update

0%
Низкий
около 2 месяцев назад
rocky логотип
RLSA-2025:23326

Moderate: skopeo security update

0%
Низкий
около 2 месяцев назад
rocky логотип
RLSA-2025:23325

Moderate: podman security update

0%
Низкий
около 2 месяцев назад
rocky логотип
RLSA-2025:23295

Moderate: podman security update

0%
Низкий
около 2 месяцев назад

Уязвимостей на страницу