Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 101

Export CSV
CVE-2022-24921

golang: regexp: stack exhaustion via a deeply nested expression

regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply nested expression.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Debian Golang Netapp and 1 more
Products
Debian Linux Go Astra Trident and 8 more
CVE-2022-1902

stackrox: Improper sanitization allows users to retrieve Notifier secrets from GraphQL API in plaintext

A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users to retrieve Notifiers from the GraphQL API, revealing secrets that can escalate their privileges.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Advanced Cluster Security
CVE-2021-43565

golang.org/x/crypto: empty plaintext packet causes panic

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Golang Redhat
Products
Ssh Acm Advanced Cluster Security and 6 more
CVE-2021-41190

Clarify Content-Type handling in OCI spec

The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during push and pull operations. Documents that contain both “manifests” and “layers” fields could be interpreted as either a manifest or an index in the absence of an accompanying Content-Type header. If a Content-Type header changed between two pulls of the same digest, a client may interpret the resulting content differently. The OCI Distribution Specification has been updated to require that a mediaType value present in a manifest or index match the Content-Type header used during the push and pull operations. Clients pulling from a registry may distrust the Content-Type header and reject an ambiguous document that contains both “manifests” and “layers” fields or “manifests” and “config” fields if they are unable to update to version 1.0.1 of the spec.

CVSS 3.1 · 3 Low EPSS 2.2% KEV · Not listed
Vendors
Fedoraproject Linuxfoundation Redhat
Products
Fedora Open Container Initiative Distribution Specification Open Container Initiative Image Format Specification and 7 more
CVE-2021-3749

Inefficient Regular Expression Complexity in axios/axios

axios is vulnerable to Inefficient Regular Expression Complexity

CVSS 3.1 · 7.5 High EPSS 8.5% KEV · Not listed
Vendors
Axios Oracle Redhat and 1 more
Products
Axios Goldengate Acm and 6 more
CVE-2021-39293

golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196)

In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.

CVSS 3.1 · 7.5 High EPSS 6.9% KEV · Not listed
Vendors
Golang Netapp Redhat
Products
Go Cloud Insights Telegraf Advanced Cluster Security and 4 more
CVE-2021-34558

golang: crypto/tls: certificate of wrong type is causing TLS client to panic

The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key exchange, allowing a malicious TLS server to cause a TLS client to panic.

CVSS 3.1 · 6.5 Medium EPSS 7.0% KEV · Not listed
Vendors
Fedoraproject Golang Netapp and 2 more
Products
Fedora Go Cloud Insights Telegraf and 16 more
CVE-2021-33197

golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty

In Go before 1.15.13 and 1.16.x before 1.16.5, some configurations of ReverseProxy (from net/http/httputil) result in a situation where an attacker is able to drop arbitrary headers.

CVSS 3.1 · 5.3 Medium EPSS 2.3% KEV · Not listed
Vendors
Golang Redhat
Products
Go Advanced Cluster Security Container Native Virtualization and 8 more
CVE-2021-33195

golang: net: lookup functions may return invalid host names

Go before 1.15.13 and 1.16.x before 1.16.5 has functions for DNS lookups that do not validate replies from DNS servers, and thus a return value may contain an unsafe injection (e.g., XSS) that does not conform to the RFC1035 format.

CVSS 3.1 · 7.3 High EPSS 3.2% KEV · Not listed
Vendors
Golang Netapp Redhat
Products
Go Cloud Insights Telegraf Agent Advanced Cluster Security and 9 more
CVE-2021-32690

Repository credentials passed to alternate domain

Helm is a tool for managing Charts (packages of pre-configured Kubernetes resources). In versions of helm prior to 3.6.1, a vulnerability exists where the username and password credentials associated with a Helm repository could be passed on to another domain referenced by that Helm repository. This issue has been resolved in 3.6.1. There is a workaround through which one may check for improperly passed credentials. One may use a username and password for a Helm repository and may audit the Helm repository in order to check for another domain being used that could have received the credentials. In the `index.yaml` file for that repository, one may look for another domain in the `urls` list for the chart versions. If there is another domain found and that chart version was pulled or installed, the credentials would be passed on.

CVSS 3.1 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Helm Redhat
Products
Helm Acm Advanced Cluster Security and 2 more
CVE-2021-31525

golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header

net/http in Go before 1.15.12 and 1.16.x before 1.16.4 allows remote attackers to cause a denial of service (panic) via a large header to ReadRequest or ReadResponse. Server, Transport, and Client can each be affected in some configurations.

CVSS 3.1 · 5.9 Medium EPSS 3.7% KEV · Not listed
Vendors
Fedoraproject Golang Redhat
Products
Fedora Go Advanced Cluster Security and 8 more
CVE-2021-29923

golang: net: incorrect parsing of extraneous zero characters at the beginning of an IP address octet

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in some situations) allows attackers to bypass access control that is based on IP addresses, because of unexpected octal interpretation. This affects net.ParseIP and net.ParseCIDR.

CVSS 3.1 · 7.5 High EPSS 3.7% KEV · Not listed
Vendors
Fedoraproject Golang Oracle and 1 more
Products
Fedora Go Timesten In-memory Database and 10 more
CVE-2021-23343

Regular Expression Denial of Service (ReDoS)

All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity.

CVSS 3.1 · 5.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Path-parse Project Redhat
Products
Path-parse Acm Advanced Cluster Security and 4 more
CVE-2020-27304

civetweb: directory traversal when using the built-in example HTTP form-based file upload mechanism via the mg_handle_form_request API

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the built-in HTTP form-based file upload mechanism, via the mg_handle_form_request API. Web applications that use the file upload form handler, and use parts of the user-controlled filename in the output path, are susceptible to directory traversal

CVSS 3.1 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Civetweb Project Redhat Siemens
Products
Civetweb Advanced Cluster Security Sinec Infrastructure Network Services