Поиск уязвимостей
Количество 12
Количество 12
ALT-PU-2020-1302
ALT-PU-2020-1302: package `golang` update to version 1.13.8-alt1
CVE-2020-0601
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.
CVE-2020-0601
Windows CryptoAPI Spoofing Vulnerability
CVE-2020-7919
Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.
CVE-2020-7919
Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.
CVE-2020-7919
Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.
CVE-2020-7919
Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte ...
GHSA-82jc-cv6x-r223
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.
BDU:2020-00181
Уязвимость интерфейса программирования приложений Windows CryptoAPI (Crypt32.dll) операционных систем Windows, позволяющая нарушителю обойти существующие ограничения безопасности и реализовать атаку типа «человек посередине»
GHSA-cjjc-xp8v-855w
Helm uses crypto package vulnerable to panic from malformed X.509 certificate
BDU:2021-01915
Уязвимость библиотек crypto/x509 и golang.org/x/crypto/cryptobyte языка программирования GO, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2019-2090
ALT-PU-2019-2090: package `golang` update to version 1.12.6-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-1302 ALT-PU-2020-1302: package `golang` update to version 1.13.8-alt1 | CVSS3: 8.1 | больше 6 лет назад | |
 | CVE-2020-0601 A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'. | CVSS3: 8.1 | 89% Высокий | почти 7 лет назад |
 | CVE-2020-0601 Windows CryptoAPI Spoofing Vulnerability | CVSS3: 8.1 | 89% Высокий | почти 7 лет назад |
 | CVE-2020-7919 Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate. | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
 | CVE-2020-7919 Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate. | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
| CVE-2020-7919 Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate. | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
| CVE-2020-7919 Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte ... | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
| GHSA-82jc-cv6x-r223 A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'. | CVSS3: 8.1 | 89% Высокий | больше 4 лет назад |
 | BDU:2020-00181 Уязвимость интерфейса программирования приложений Windows CryptoAPI (Crypt32.dll) операционных систем Windows, позволяющая нарушителю обойти существующие ограничения безопасности и реализовать атаку типа «человек посередине» | CVSS3: 8.1 | 89% Высокий | почти 7 лет назад |
| GHSA-cjjc-xp8v-855w Helm uses crypto package vulnerable to panic from malformed X.509 certificate | CVSS3: 7.5 | 3% Низкий | больше 5 лет назад |
| BDU:2021-01915 Уязвимость библиотек crypto/x509 и golang.org/x/crypto/cryptobyte языка программирования GO, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 3% Низкий | почти 7 лет назад |
| ALT-PU-2019-2090 ALT-PU-2019-2090: package `golang` update to version 1.12.6-alt1 | CVSS3: 9.8 | больше 7 лет назад |
Уязвимостей на страницу