İçeriğe atla
Noroxi

Golang kayıtları

golang üreticisine ait 230 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %0,9
Silahlaştırılmış
2 · %0,9
Pre-auth RCE
15
Düzeltme kaydı olan
%98,7
Yayından KEV’e ortanca
330 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

230 kayıt
  • CVE-2023-44487
    90Hemen

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware10 Eki 2023

  • CVE-2020-0601
    89Hemen

    A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attac

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %89

    microsoft · windows 10 150714 Oca 2020

  • CVE-2023-45288
    58Planlayın

    HTTP/2 CONTINUATION flood in net/http

    YüksekCVSS 7,5Kavram kanıtıEPSS %91

    go standard library · net/http4 Nis 2024

  • CVE-2018-7187
    54Planlayın

    The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used, does not validate the import path (get/vcs.go only

    YüksekCVSS 8,8İstismar yokEPSS %63

    golang · go16 Şub 2018

  • CVE-2018-16873
    52Planlayın

    In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to remote code execution when executed with the -u flag and

    YüksekCVSS 8,1İstismar yokEPSS %66

    golang · go14 Ara 2018

  • CVE-2023-48795
    51Planlayın

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    OrtaCVSS 5,9Kavram kanıtıEPSS %93

    ssh · ssh18 Ara 2023

  • CVE-2021-38297
    42Planlayın

    Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    golang · go18 Eki 2021

  • CVE-2015-5739
    42Planlayın

    The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allows remote attackers t

    KritikCVSS 9,8İstismar yokEPSS %9

    golang · go18 Eki 2017

  • CVE-2017-15041
    42Planlayın

    Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution.

    KritikCVSS 9,8İstismar yokEPSS %9

    golang · go5 Eki 2017

  • CVE-2019-14809
    42Planlayın

    net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applica

    KritikCVSS 9,8İstismar yokEPSS %8

    golang · go13 Ağu 2019

  • CVE-2015-5740
    40Planlayın

    The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to condu

    KritikCVSS 9,8İstismar yokEPSS %3

    golang · go18 Eki 2017

  • CVE-2015-5741
    40Planlayın

    The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to condu

    KritikCVSS 9,8İstismar yokEPSS %2

    golang · go8 Şub 2020

  • CVE-2019-11888
    40Planlayın

    Go through 1.12.5 on Windows mishandles process creation with a nil environment in conjunction with a non-nil token, which allows attackers

    KritikCVSS 9,8İstismar yokEPSS %2

    golang · go13 May 2019

  • CVE-2023-24538
    40Planlayın

    Backticks not treated as string delimiters in html/template

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    golang · go6 Nis 2023

  • CVE-2024-24790
    40Planlayın

    Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

    KritikCVSS 9,8İstismar yokEPSS %1

    golang · go5 Haz 2024

  • CVE-2012-2666
    40Planlayın

    golang/go in 1.0.2 fixes all.bash on shared machines.

    KritikCVSS 9,8İstismar yokEPSS %1

    golang · go9 Tem 2021

  • CVE-2023-29404
    40Planlayın

    Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go

    KritikCVSS 9,8İstismar yokEPSS %1

    golang · go8 Haz 2023

  • CVE-2023-39320
    40Planlayın

    Arbitrary code execution via go.mod toolchain directive in cmd/go

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    golang · go8 Eyl 2023

  • CVE-2023-29405
    40Planlayın

    Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go

    KritikCVSS 9,8İstismar yokEPSS %1

    golang · go8 Haz 2023

  • CVE-2023-29402
    40Planlayın

    Code injection via go command with cgo in cmd/go

    KritikCVSS 9,8İstismar yokEPSS %1

    golang · go8 Haz 2023

  • CVE-2025-68121
    40Planlayın

    Unexpected session resumption in crypto/tls

    KritikCVSS 10,0İstismar yokEPSS %0

    golang · go5 Şub 2026

  • CVE-2026-46595
    40Planlayın

    Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

    KritikCVSS 10,0Kavram kanıtıEPSS %0

    golang · crypto22 May 2026

  • CVE-2023-24540
    39İzleyin

    Improper handling of JavaScript whitespace in html/template

    KritikCVSS 9,8İstismar yokEPSS %1

    golang · go11 May 2023

  • CVE-2026-27143
    39İzleyin

    Missing bound checks can lead to memory corruption in safe Go in cmd/compile

    KritikCVSS 9,8İstismar yokEPSS %0

    golang · go7 Nis 2026

  • CVE-2026-42508
    38İzleyin

    Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

    KritikCVSS 9,1İstismar yokEPSS %6

    golang · crypto22 May 2026