Known vulnerabilities in golang - page 5

Vendor: OpenAnolis
Software: golang
Software CPE: cpe:2.3:o:openanolis:golang:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 100
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting golang golang is affected by 100 known vulnerabilities: 8 high, 71 medium, 21 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66120 - Improper input validation
CVE-2021-41772		 CWE-20 Medium
No
No
 1.17.7-1 04.08.2022 SB2021110826
SB2022080503
SB2022083021
and 22 more
#VU65080 - Memory corruption
CVE-2021-41771		 CWE-119 Medium
No
No
 1.17.7-1 11.07.2022 SB2022071109
SB2022080503
SB2022083021
and 21 more
#VU62038 - Resource exhaustion
CVE-2022-23772		 CWE-400 Medium
No
No
 1.17.7-1 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 40 more
#VU62037 - Incorrect Authorization
CVE-2022-23773		 CWE-863 Low
Available
No
 1.17.7-1 10.04.2022 SB2022041002
SB2022060126
SB2022060127
and 39 more
#VU62036 - Unchecked Return Value
CVE-2022-23806		 CWE-252 Medium
No
No
 1.17.7-1 10.04.2022 SB2022041002
SB2022041003
SB2022060126
and 46 more
#VU61227 - Incorrect Regular Expression
CVE-2022-24921		 CWE-185 Medium
No
No
 1.17.10-1.0.1 10.03.2022 SB2022031004
SB2022031005
SB2022041208
and 41 more
#VU60921 - Allocation of Resources Without Limits or Throttling
CVE-2021-39293		 CWE-770 Medium
No
No
 1.17.7-1 01.03.2022 SB2022030106
SB2022030107
SB2022061528
and 20 more
#VU59042 - Resource exhaustion
CVE-2021-44717		 CWE-400 Medium
No
No
 1.16.12-1 16.12.2021 SB2021121610
SB2021121646
SB2022031628
and 32 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 1.16.12-1 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57579 - Memory corruption
CVE-2021-38297		 CWE-119 High
Available
No
 1.17.7-1 21.10.2021 SB2021102121
SB2021122801
SB2021102022
and 23 more
#VU56829 - Improper input validation
CVE-2021-29923		 CWE-20 Medium
No
No
 1.16.12-1 22.09.2021 SB2021092225
SB2021092226
SB2021100408
and 37 more
#VU55665 - Improper Certificate Validation
CVE-2021-34558		 CWE-295 Medium
Available
No
 1.15.14-1 09.08.2021 SB2021080909
SB2021080912
SB2021081122
and 65 more
#VU54910 - Uncontrolled Recursion
CVE-2021-31525		 CWE-674 Medium
No
No
 1.15.14-1 15.07.2021 SB2021071514
SB2021052725
SB2021071515
and 39 more
#VU54521 - Resource exhaustion
CVE-2021-33196		 CWE-400 Medium
No
No
 1.15.14-1, 1.17.7-1 04.07.2021 SB2021070405
SB2021070406
SB2021071515
and 37 more
#VU51486 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-27918		 CWE-835 Medium
No
No
 1.15.14-1 15.03.2021 SB2021031515
SB2021071515
SB2021071516
and 18 more
#VU50047 - Incorrect Calculation
CVE-2021-3114		 CWE-682 Medium
No
No
 1.15.14-1 26.01.2021 SB2021012714
SB2021012715
SB20210120130
and 40 more
#VU48480 - Improper input validation
CVE-2020-28362		 CWE-20 Medium
No
No
 1.15.14-1 17.11.2020 SB2020111715
SB2020111716
SB2020111225
and 30 more
#VU48479 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28367		 CWE-94 High
No
No
 1.15.14-1 17.11.2020 SB2020111715
SB2020111716
SB2020111227
and 17 more
#VU48478 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28366		 CWE-94 High
No
No
 1.15.14-1 17.11.2020 SB2020111715
SB2020111716
SB2020111226
and 17 more
#VU46580 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-24553		 CWE-79 Low
No
No
 1.15.14-1 02.09.2020 SB2020090217
SB2020091020
SB2020091021
and 20 more


Showing elements 81 - 100 out of 100