Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-35881 State: PUBLISHED Published: 2020-12-31T08:26:22 Last Updated: 2024-08-04T17:16:12.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0027.html
CVE ID: CVE-2020-35882 State: PUBLISHED Published: 2020-12-31T08:26:10 Last Updated: 2024-08-04T17:16:13.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0028.html
CVE ID: CVE-2020-35883 State: PUBLISHED Published: 2020-12-31T08:25:58 Last Updated: 2024-08-04T17:16:12.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0030.html
CVE ID: CVE-2020-35884 State: PUBLISHED Published: 2020-12-31T08:25:45 Last Updated: 2024-08-04T17:16:13.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0031.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VO6SRTCEPEYO2OX647I3H5XUWLFDRDWL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M3JDNRE5RXJOWZZZF5QSCG4GUCSLT
//lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M3JDNRE5RXJOWZZZF5QSCG4GUCSLTHF2/
CVE ID: CVE-2020-35885 State: PUBLISHED Published: 2020-12-31T08:25:34 Last Updated: 2024-08-04T17:16:13.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0032.html
CVE ID: CVE-2020-35886 State: PUBLISHED Published: 2020-12-31T08:25:25 Last Updated: 2024-08-04T17:16:13.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the arr crate through 2020-08-25 for Rust. An attacker can smuggle non-Sync/Send types across a thread boundary to cause a data race. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0034.html
CVE ID: CVE-2020-35887 State: PUBLISHED Published: 2020-12-31T08:25:10 Last Updated: 2024-08-04T17:16:13.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the arr crate through 2020-08-25 for Rust. There is a buffer overflow in Index and IndexMut. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0034.html
CVE ID: CVE-2020-35888 State: PUBLISHED Published: 2020-12-31T08:25:01 Last Updated: 2024-08-04T17:16:13.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::new_from_template. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0034.html
CVE ID: CVE-2020-35889 State: PUBLISHED Published: 2020-12-31T08:24:52 Last Updated: 2024-08-04T17:16:13.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the crayon crate through 2020-08-31 for Rust. A TOCTOU issue has a resultant memory safety violation via HandleLike. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0037.html
CVE ID: CVE-2020-35890 State: PUBLISHED Published: 2020-12-31T08:24:40 Last Updated: 2024-08-04T17:16:13.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via out-of-bounds access for large capacity. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0038.html
CVE ID: CVE-2020-35891 State: PUBLISHED Published: 2020-12-31T08:24:28 Last Updated: 2024-08-04T17:16:13.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remove() double free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0038.html
CVE ID: CVE-2020-35892 State: PUBLISHED Published: 2020-12-31T08:24:18 Last Updated: 2024-08-04T17:16:13.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index() allows an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0039.html
CVE ID: CVE-2020-35893 State: PUBLISHED Published: 2020-12-31T08:24:06 Last Updated: 2024-08-04T17:16:13.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0039.html
CVE ID: CVE-2020-35894 State: PUBLISHED Published: 2020-12-31T08:23:55 Last Updated: 2024-08-04T17:16:13.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0040.html
CVE ID: CVE-2020-35895 State: PUBLISHED Published: 2020-12-31T08:23:44 Last Updated: 2024-08-04T17:16:13.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0042.html
CVE ID: CVE-2020-35896 State: PUBLISHED Published: 2020-12-31T08:23:25 Last Updated: 2024-08-04T17:16:13.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0043.html
CVE ID: CVE-2020-35897 State: PUBLISHED Published: 2020-12-31T08:23:13 Last Updated: 2024-08-04T17:16:13.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0044.html
CVE ID: CVE-2020-35898 State: PUBLISHED Published: 2020-12-31T08:23:03 Last Updated: 2024-08-04T17:16:13.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0045.html
CVE ID: CVE-2020-35899 State: PUBLISHED Published: 2020-12-31T08:22:55 Last Updated: 2024-08-04T17:16:12.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0046.html
CVE ID: CVE-2020-35900 State: PUBLISHED Published: 2020-12-31T08:22:44 Last Updated: 2024-08-04T17:16:13.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0047.html
CVE ID: CVE-2020-35901 State: PUBLISHED Published: 2020-12-31T08:22:31 Last Updated: 2024-08-04T17:16:13.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0048.html
CVE ID: CVE-2020-35902 State: PUBLISHED Published: 2020-12-31T08:22:11 Last Updated: 2024-08-04T17:16:13.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0049.html
CVE ID: CVE-2020-35903 State: PUBLISHED Published: 2020-12-31T08:21:49 Last Updated: 2024-08-04T17:16:13.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0050.html
CVE ID: CVE-2020-35904 State: PUBLISHED Published: 2020-12-31T08:21:39 Last Updated: 2024-08-04T17:16:13.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the relationship between the memory allocation and how many iterator elements there are. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0052.html
CVE ID: CVE-2020-35905 State: PUBLISHED Published: 2020-12-31T08:21:25 Last Updated: 2024-08-04T17:16:13.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations (in safe code). Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0059.html
CVE ID: CVE-2020-35906 State: PUBLISHED Published: 2020-12-31T08:21:15 Last Updated: 2024-08-04T17:16:13.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the futures-task crate before 0.3.6 for Rust. futures_task::waker may cause a use-after-free in a non-static type situation. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0060.html
CVE ID: CVE-2020-35907 State: PUBLISHED Published: 2020-12-31T08:20:58 Last Updated: 2024-08-04T17:16:13.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0061.html
CVE ID: CVE-2020-35908 State: PUBLISHED Published: 2020-12-31T08:20:46 Last Updated: 2024-08-04T17:16:13.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0062.html
CVE ID: CVE-2020-35909 State: PUBLISHED Published: 2020-12-31T08:20:32 Last Updated: 2024-08-04T17:16:13.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the multihash crate before 0.11.3 for Rust. The from_slice parsing code can panic via unsanitized data from a network server. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0068.html
CVE ID: CVE-2020-35910 State: PUBLISHED Published: 2020-12-31T08:20:21 Last Updated: 2024-08-04T17:16:13.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard unsoundness. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0070.html
CVE ID: CVE-2020-35911 State: PUBLISHED Published: 2020-12-31T08:20:12 Last Updated: 2024-08-04T17:16:13.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0070.html
CVE ID: CVE-2020-35912 State: PUBLISHED Published: 2020-12-31T08:20:03 Last Updated: 2024-08-04T17:16:13.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0070.html
CVE ID: CVE-2020-35913 State: PUBLISHED Published: 2020-12-31T08:19:55 Last Updated: 2024-08-04T17:16:13.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockReadGuard unsoundness. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0070.html
CVE ID: CVE-2020-35914 State: PUBLISHED Published: 2020-12-31T08:19:47 Last Updated: 2024-08-04T17:16:13.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0070.html
CVE ID: CVE-2020-35915 State: PUBLISHED Published: 2020-12-31T08:18:59 Last Updated: 2024-08-04T17:16:13.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0072.html
CVE ID: CVE-2020-35916 State: PUBLISHED Published: 2020-12-31T08:18:49 Last Updated: 2024-08-04T17:16:13.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. (In the case of LLVM, the IR may be always correct.) Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0073.html
CVE ID: CVE-2020-35917 State: PUBLISHED Published: 2020-12-31T08:18:37 Last Updated: 2024-08-04T17:16:13.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0074.html
CVE ID: CVE-2020-35918 State: PUBLISHED Published: 2020-12-31T08:18:21 Last Updated: 2024-08-04T17:16:13.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the branca crate before 0.10.0 for Rust. Decoding tokens (with invalid base62 data) can panic. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0075.html - https://github.com/tuupola/branca-spec/issues/22 - https://github.com/return/branca/issues/24
CVE ID: CVE-2020-35919 State: PUBLISHED Published: 2020-12-31T08:18:10 Last Updated: 2024-08-04T17:16:13.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0078.html
CVE ID: CVE-2020-35920 State: PUBLISHED Published: 2020-12-31T08:17:48 Last Updated: 2024-08-04T17:16:13.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the socket2 crate before 0.3.16 for Rust. It has false expectations about the std::net::SocketAddr memory representation. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0079.html
CVE ID: CVE-2020-35921 State: PUBLISHED Published: 2020-12-31T08:17:39 Last Updated: 2024-08-04T17:16:13.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0080.html
CVE ID: CVE-2020-35922 State: PUBLISHED Published: 2020-12-31T08:17:30 Last Updated: 2024-08-04T17:16:13.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the mio crate before 0.7.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0081.html
CVE ID: CVE-2020-35923 State: PUBLISHED Published: 2020-12-31T08:17:18 Last Updated: 2024-08-04T17:16:13.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ordered-float crate before 1.1.1 and 2.x before 2.0.1 for Rust. A NotNan value can contain a NaN. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0082.html
CVE ID: CVE-2020-35924 State: PUBLISHED Published: 2020-12-31T08:16:55 Last Updated: 2024-08-04T17:16:13.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the try-mutex crate before 0.3.0 for Rust. TryMutex<T> allows cross-thread sending of a non-Send type. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0087.html
CVE ID: CVE-2020-35925 State: PUBLISHED Published: 2020-12-31T08:16:44 Last Updated: 2024-08-04T17:16:13.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the magnetic crate before 2.0.1 for Rust. MPMCConsumer and MPMCProducer allow cross-thread sending of a non-Send type. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0088.html
CVE ID: CVE-2020-35926 State: PUBLISHED Published: 2020-12-31T08:16:30 Last Updated: 2024-08-04T17:16:13.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0089.html
CVE ID: CVE-2020-35927 State: PUBLISHED Published: 2020-12-31T08:16:17 Last Updated: 2024-08-04T17:16:13.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex<T> allows cross-thread data races of non-Send types. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0090.html
CVE ID: CVE-2020-35928 State: PUBLISHED Published: 2020-12-31T08:16:02 Last Updated: 2024-08-04T17:16:13.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0092.html
CVE ID: CVE-2020-35929 State: PUBLISHED Published: 2021-01-19T16:53:36 Last Updated: 2024-08-04T17:16:13.258Z Vendors: Kaspersky Products: TinyCheck Problem Types: Information Disclosure (ID) Description: In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/KasperskyLab/TinyCheck/security/advisories/GHSA-9f7g-72h2-59g7
CVE ID: CVE-2020-35930 State: PUBLISHED Published: 2020-12-31T19:09:17 Last Updated: 2024-08-04T17:16:13.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/seopanel/Seo-Panel/issues/201
CVE ID: CVE-2020-35931 State: PUBLISHED Published: 2020-12-31T20:14:11 Last Updated: 2024-08-04T17:16:13.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF document via an Evil Annotation Attack because the products fail to consider a null value for a Subtype entry of the Annotation dictionary, in an incremental update. Additional Analyst Notes: - CVE Program Container: References: - https://www.foxitsoftware.com/support/security-bulletins.html
CVE ID: CVE-2020-35932 State: PUBLISHED Published: 2021-01-01T01:24:25 Last Updated: 2024-08-04T17:16:13.453Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to inject arbitrary PHP objects via the options[inline_edits] parameter. NOTE: exploitability depends on PHP objects that might be present with certain other plugins or themes. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.
certain other plugins or themes. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/blog/2020/08/newsletter-plugin-vulnerabilities-affect-over-300000-sites/