Поиск уязвимостей
Количество 18
Количество 18
ALT-PU-2020-2766
ALT-PU-2020-2766: package `golang` update to version 1.15.2-alt1
CVE-2020-29510
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
CVE-2020-29510
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
CVE-2020-29510
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
CVE-2020-29510
The encoding/xml package in Go versions 1.15 and earlier does not corr ...
CVE-2020-24553
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
CVE-2020-24553
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
CVE-2020-24553
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
CVE-2020-24553
CVE-2020-24553
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html ...
GHSA-p6mv-vmpw-j23r
The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.
openSUSE-SU-2020:1587-1
Security update for go1.14
openSUSE-SU-2020:1584-1
Security update for go1.14
SUSE-SU-2020:2776-1
Security update for go1.15
SUSE-SU-2020:2761-1
Security update for go1.14
GHSA-pfr3-j9r8-5229
Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header.
ALT-PU-2020-2608
ALT-PU-2020-2608: package `golang` update to version 1.15-alt1
ELSA-2020-5493
ELSA-2020-5493: go-toolset:ol8 security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-2766 ALT-PU-2020-2766: package `golang` update to version 1.15.2-alt1 | CVSS3: 6.1 | около 6 лет назад | |
 | CVE-2020-29510 The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. | CVSS3: 5.6 | 2% Низкий | почти 6 лет назад |
 | CVE-2020-29510 The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. | CVSS3: 5.6 | 2% Низкий | почти 6 лет назад |
 | CVE-2020-29510 The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. | CVSS3: 5.6 | 2% Низкий | почти 6 лет назад |
| CVE-2020-29510 The encoding/xml package in Go versions 1.15 and earlier does not corr ... | CVSS3: 5.6 | 2% Низкий | почти 6 лет назад |
| CVE-2020-24553 Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header. | CVSS3: 6.1 | 4% Низкий | около 6 лет назад |
| CVE-2020-24553 Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header. | CVSS3: 6.1 | 4% Низкий | больше 6 лет назад |
| CVE-2020-24553 Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header. | CVSS3: 6.1 | 4% Низкий | около 6 лет назад |
 | CVSS3: 6.1 | 4% Низкий | около 6 лет назад | |
| CVE-2020-24553 Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html ... | CVSS3: 6.1 | 4% Низкий | около 6 лет назад |
| GHSA-p6mv-vmpw-j23r The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications. | 2% Низкий | больше 4 лет назад | |
 | openSUSE-SU-2020:1587-1 Security update for go1.14 | 4% Низкий | около 6 лет назад | |
| openSUSE-SU-2020:1584-1 Security update for go1.14 | 4% Низкий | около 6 лет назад | |
| SUSE-SU-2020:2776-1 Security update for go1.15 | 4% Низкий | около 6 лет назад | |
| SUSE-SU-2020:2761-1 Security update for go1.14 | 4% Низкий | около 6 лет назад | |
| GHSA-pfr3-j9r8-5229 Go before 1.14.8 and 1.15.x before 1.15.1 allows XSS because text/html is the default for CGI/FCGI handlers that lack a Content-Type header. | 4% Низкий | больше 4 лет назад | |
| ALT-PU-2020-2608 ALT-PU-2020-2608: package `golang` update to version 1.15-alt1 | CVSS3: 6.1 | 4% Низкий | около 6 лет назад |
| ELSA-2020-5493 ELSA-2020-5493: go-toolset:ol8 security update (MODERATE) | почти 6 лет назад |
Уязвимостей на страницу