Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 63

Export CSV
CVE-2020-29510

go: encoding/xml: XML directives instability

The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Golang Netapp
Products
Go Trident
CVE-2020-29509

go: encoding/xml: XML attribute instability

The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that behave in conflicting ways during different stages of processing in affected downstream applications.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Golang Netapp
Products
Go Trident
CVE-2020-27846

crewjam/saml: authentication bypass in saml authentication

A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

CVSS 3.1 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Fedoraproject Grafana Redhat and 1 more
Products
Fedora Grafana Enterprise Linux and 4 more