https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:54:18 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2022-41720 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2022-41720 https://cve.radiocsirt.org/vuln/bit-golang-2022-41720 <p><strong>Affected:</strong> Bitnami: golang</p> <p>On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS(&#34;C:/tmp&#34;).Open(&#34;COM1&#34;) opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS(&#34;&#34;) has changed. Previously, an empty root was treated equivalently to &#34;/&#34;, so os.DirFS(&#34;&#34;).Open(&#34;tmp&#34;) would open the path &#34;/tmp&#34;. This now returns an error.</p> <p><strong>Affected:</strong> Bitnami: golang</p> <p>On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS(&#34;C:/tmp&#34;).Open(&#34;COM1&#34;) opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS(&#34;&#34;) has changed. Previously, an empty root was treated equivalently to &#34;/&#34;, so os.DirFS(&#34;&#34;).Open(&#34;tmp&#34;) would open the path &#34;/tmp&#34;. This now returns an error.</p> https://cve.radiocsirt.org/vuln/bit-golang-2022-41720 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0272 certfr-2023-avi-0272 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0272 https://cve.radiocsirt.org/vuln/euvd-2026-233117 EUVD-2026-233117 https://cve.radiocsirt.org/vuln/euvd-2026-233117 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41720 <p>On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS(&#34;C:/tmp&#34;).Open(&#34;COM1&#34;) opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS(&#34;&#34;) has changed. Previously, an empty root was treated equivalently to &#34;/&#34;, so os.DirFS(&#34;&#34;).Open(&#34;tmp&#34;) would open the path &#34;/tmp&#34;. This now returns an error.</p> <p>On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS(&#34;C:/tmp&#34;).Open(&#34;COM1&#34;) opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS(&#34;&#34;) has changed. Previously, an empty root was treated equivalently to &#34;/&#34;, so os.DirFS(&#34;&#34;).Open(&#34;tmp&#34;) would open the path &#34;/tmp&#34;. This now returns an error.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41720 https://cve.radiocsirt.org/vuln/ghsa-cvf9-g74c-vv79 <p>On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS(&#34;C:/tmp&#34;).Open(&#34;COM1&#34;) opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS(&#34;&#34;) has changed. Previously, an empty root was treated equivalently to &#34;/&#34;, so os.DirFS(&#34;&#34;).Open(&#34;tmp&#34;) would open the path &#34;/tmp&#34;. This now returns an error.</p> <p>On Windows, restricted files can be accessed via os.DirFS and http.Dir. The os.DirFS function and http.Dir type provide access to a tree of files rooted at a given directory. These functions permit access to Windows device files under that root. For example, os.DirFS(&#34;C:/tmp&#34;).Open(&#34;COM1&#34;) opens the COM1 device. Both os.DirFS and http.Dir only provide read-only filesystem access. In addition, on Windows, an os.DirFS for the directory (the root of the current drive) can permit a maliciously crafted path to escape from the drive and access any path on the system. With fix applied, the behavior of os.DirFS(&#34;&#34;) has changed. Previously, an empty root was treated equivalently to &#34;/&#34;, so os.DirFS(&#34;&#34;).Open(&#34;tmp&#34;) would open the path &#34;/tmp&#34;. This now returns an error.</p> https://cve.radiocsirt.org/vuln/ghsa-cvf9-g74c-vv79 https://cve.radiocsirt.org/vuln/gsd-2022-41720 gsd-2022-41720 https://cve.radiocsirt.org/vuln/gsd-2022-41720 https://cve.radiocsirt.org/vuln/msrc_cve-2022-41720 msrc_CVE-2022-41720 https://cve.radiocsirt.org/vuln/msrc_cve-2022-41720 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12552-1 <p>go1.18-1.18.9-1.1 on GA media</p> <p>go1.18-1.18.9-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12552-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0138 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Communications Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0138