Most recent entries from all

Withdrawn: BELL-CVE-2022-29804 — CVE-2022-29804 does not affect BellSoft software

Withdrawn by the publisher.

BIT-golang-2022-29804 — Path traversal via Clean on Windows in path/filepath

Affected: Bitnami: golang

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.

certfr-2023-avi-0428 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre…

certfr-2023-avi-0428

EUVD-2026-16282

fkie_cve-2022-29804

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.

GHSA-4r7w-gv7f-q74g

Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.

gsd-2022-29804

msrc_CVE-2022-29804 — Path traversal via Clean on Windows in path/filepath

msrc_CVE-2022-29804

OESA-2022-1857 — golang security update

Affected: openEuler:20.03-LTS-SP1: golang, openEuler:20.03-LTS-SP3: golang, openEuler:22.03-LTS: golang

The Go Programming Language. Security Fix(es): Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible.(CVE-2022-29526) Incorrect conversion of certain invalid paths to valid, absolute paths in Clean in path/filepath before Go 1.17.11 and Go 1.18.3 on Windows allows potential directory traversal attack.(CVE-2022-29804)

openSUSE-SU-2024:12123-1 — go1.17-1.17.11-1.1 on GA media

go1.17-1.17.11-1.1 on GA media

WID-SEC-W-2022-1461 — IBM Spectrum Protect: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode mit Administratorrechten auszuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.