Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
M OS Command Injection	github.com/bishopfox/sliver/client/cli *	Go	23 Jul 2024
M Incorrect Default Permissions	k8s.io/kubernetes/pkg/util/filesystem <1.27.16 >=1.28.0 <1.28.12 >=1.29.0 <1.29.7 >=1.30.0 <1.30.3	Go	23 Jul 2024
M Incorrect Default Permissions	k8s.io/kubernetes/pkg/kubelet/kuberuntime <1.27.16 >=1.28.0 <1.28.12 >=1.29.0 <1.29.7 >=1.30.0 <1.30.3	Go	23 Jul 2024
M Incorrect Default Permissions	k8s.io/kubernetes/pkg/kubelet <1.27.16 >=1.28.0 <1.28.12 >=1.29.0 <1.29.7 >=1.30.0 <1.30.3	Go	23 Jul 2024
H Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')	go.woodpecker-ci.org/woodpecker/v2/pipeline/frontend >=2.0.0 <2.7.0	Go	21 Jul 2024
H Directory Traversal	go.woodpecker-ci.org/woodpecker/v2/pipeline/frontend >=2.0.0 <2.7.0	Go	21 Jul 2024
H Directory Traversal	github.com/woodpecker-ci/woodpecker/pipeline/frontend >=0.15.0-rc1	Go	21 Jul 2024
M SQL Injection	github.com/1panel-dev/1panel/backend <1.10.12-lts	Go	19 Jul 2024
C SQL Injection	github.com/1panel-dev/1panel/backend <1.10.12-beta	Go	19 Jul 2024
M Incorrect Default Permissions	github.com/kubernetes/kubernetes/pkg/util/filesystem <1.27.16 >=1.28.0 <1.28.12 >=1.29.0 <1.29.7 >=1.30.0 <1.30.3	Go	19 Jul 2024
M Incorrect Default Permissions	github.com/kubernetes/kubernetes/pkg/kubelet/kuberuntime <1.27.16 >=1.28.0 <1.28.12 >=1.29.0 <1.29.7 >=1.30.0 <1.30.3	Go	19 Jul 2024
M Incorrect Default Permissions	github.com/kubernetes/kubernetes/pkg/kubelet <1.27.16 >=1.28.0 <1.28.12 >=1.29.0 <1.29.7 >=1.30.0 <1.30.3	Go	19 Jul 2024
L Denial of Service (DoS)	github.com/kubernetes/client-go/util/jsonpath <0.16.4 >=1.7.6 <1.16.0-beta.1 >=1.17.0-alpha.0 <1.17.0-alpha.1	Go	18 Jul 2024
L Denial of Service (DoS)	k8s.io/client-go/util/jsonpath <0.16.4 >=1.7.6 <1.16.0-beta.1 >=1.17.0-alpha.0 <1.17.0-alpha.1	Go	18 Jul 2024
M Credential Exposure	github.com/kubernetes/client-go/transport <0.16.4 >=1.7.6 <1.16.0-beta.1 >=1.17.0-alpha.0 <1.17.0-alpha.1	Go	18 Jul 2024
M Credential Exposure	k8s.io/client-go/transport <0.16.4 >=1.7.6 <1.16.0-beta.1 >=1.17.0-alpha.0 <1.17.0-alpha.1	Go	18 Jul 2024
H Server-side Request Forgery (SSRF)	github.com/gotenberg/gotenberg/v8/pkg/modules/webhook <8.1.0	Go	18 Jul 2024
H Server-side Request Forgery (SSRF)	github.com/gotenberg/gotenberg/v8/pkg/modules/chromium <8.1.0	Go	18 Jul 2024
H Server-side Request Forgery (SSRF)	github.com/gotenberg/gotenberg/v8/pkg/gotenberg <8.1.0	Go	18 Jul 2024
H Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')	github.com/projectdiscovery/nuclei/v3/pkg/templates <3.3.0	Go	18 Jul 2024
M Cookie Tossing	github.com/gitpod-io/gitpod/install/installer/pkg/components/public-api-server <main-gha.27122	Go	18 Jul 2024
M Cookie Tossing	github.com/gitpod-io/gitpod/install/installer/pkg/components/server <main-gha.27122	Go	18 Jul 2024
M Cookie Tossing	github.com/gitpod-io/gitpod/components/ws-proxy/pkg/proxy <main-gha.27122	Go	18 Jul 2024
M Cookie Tossing	github.com/gitpod-io/gitpod/install/installer/pkg/components/auth <main-gha.27122	Go	18 Jul 2024
M Cookie Tossing	github.com/gitpod-io/gitpod/components/server/go/pkg/lib <main-gha.27122	Go	18 Jul 2024
H Improper Authentication	github.com/skupperproject/skupper/client <1.8.0	Go	17 Jul 2024
M Authorization Bypass Through User-Controlled Key	zotregistry.dev/zot/pkg/storage/types <2.1.0	Go	16 Jul 2024
M Authorization Bypass Through User-Controlled Key	zotregistry.dev/zot/pkg/storage/cache <2.1.0	Go	16 Jul 2024
M Authorization Bypass Through User-Controlled Key	zotregistry.dev/zot/pkg/storage/imagestore <2.1.0	Go	16 Jul 2024
M Authorization Bypass Through User-Controlled Key	zotregistry.dev/zot/pkg/api/ <2.1.0	Go	16 Jul 2024

APPLICATION

OPERATING SYSTEM