CVE-2021-4239
The Noise protocol implementation suffers from weakened cryptographic security after encrypting 2^64 messages, and a potential denial of service attack. After 2^64 […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik Açıkları
Güvenlik Açıkları
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2016-15005
CSRF tokens are generated using math/rand, which is not a cryptographically secure rander number generation, making predicting their values relatively trivial and […]
İçeriği inceleyinCVE-2017-20146
Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, […]
İçeriği inceleyinCVE-2018-25046
Due to improper path santization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target […]
İçeriği inceleyinCVE-2019-25072
Due to support of Gzip compression in request bodies, as well as a lack of limiting response body sizes, a malicious server […]
İçeriği inceleyinCVE-2019-25073
Improper path santiziation in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory. Zafiyet […]
İçeriği inceleyinCVE-2020-36559
Due to improper santization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target […]
İçeriği inceleyinCVE-2020-36560
Due to improper path santization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target […]
İçeriği inceleyinCVE-2020-36561
Due to improper path santization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target […]
İçeriği inceleyinCVE-2020-36564
Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied […]
İçeriği inceleyinCVE-2020-36566
Due to improper path santization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target […]
İçeriği inceleyinCVE-2020-36568
Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation. Zafiyet ile […]
İçeriği inceleyin