Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-35837 State: PUBLISHED Published: 2020-12-29T23:30:50 Last Updated: 2024-08-04T17:16:12.453Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062650/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2018-0499
CVE ID: CVE-2020-35838 State: PUBLISHED Published: 2020-12-29T23:30:42 Last Updated: 2024-08-04T17:16:12.662Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.74, R8900 before 1.0.4.28, R9000 before 1.0.4.28, RAX120 before 1.0.0.78, XR500 before 2.3.2.56, and XR700 before 1.0.1.10. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062660/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2018-0509
CVE ID: CVE-2020-35839 State: PUBLISHED Published: 2020-12-29T23:30:33 Last Updated: 2024-08-04T17:16:12.543Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AC:L/AV:A/A:N/C:H/I:H/PR:H/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by Stored XSS. This affects D7800 before 1.0.1.56, R7500v2 before 1.0.3.46, R7800 before 1.0.2.68, R8900 before 1.0.4.28, R9000 before 1.0.4.28, XR500 before 2.3.2.56, XR700 before 1.0.1.10, and RAX120 before 1.0.0.78. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062643/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2018-0513
CVE ID: CVE-2020-35840 State: PUBLISHED Published: 2020-12-29T23:30:24 Last Updated: 2024-08-04T17:16:12.538Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AC:L/AV:A/A:N/C:L/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.76, WNR1000v4 before 1.1.0.62, WNR2020 before 1.1.0.62, and WNR2050 before 1.1.0.62. Additional Analyst Notes: - CVE Program Contain
4 before 1.1.0.62, WNR2020 before 1.1.0.62, and WNR2050 before 1.1.0.62. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062711/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2019-0010
CVE ID: CVE-2020-35841 State: PUBLISHED Published: 2020-12-29T23:30:17 Last Updated: 2024-08-04T17:16:12.625Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AC:L/AV:A/A:N/C:L/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.76, R6700v2 before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, WNR1000v4 before 1.1.0.62, WNR20
before 1.2.0.62, R6800 before 1.2.0.62, R6900v2 before 1.2.0.62, R7450 before 1.2.0.62, WNR1000v4 before 1.1.0.62, WNR2020 before 1.1.0.62, and WNR2050 before 1.1.0.62. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062712/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2019-0013
CVE ID: CVE-2020-35842 State: PUBLISHED Published: 2020-12-29T23:30:03 Last Updated: 2024-08-04T17:16:12.551Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AC:L/AV:A/A:N/C:L/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 before 1.0.0.42, R6050 before 1.0.1.24, R6080 before 1.0.0.42, R6120 before 1.0.0.66, R6220 before 1.1.0.100, R6260 before 1.1.0.76, WNR1000v4 before 1.1.0.62, WNR2020 before 1.1.0.62, and WNR2050 before 1.1.0.62. Additional Analyst Notes: - CVE Program Contain
4 before 1.1.0.62, WNR2020 before 1.1.0.62, and WNR2050 before 1.1.0.62. Additional Analyst Notes: - CVE Program Container: References: - https://kb.netgear.com/000062713/Security-Advisory-for-Stored-Cross-Site-Scripting-on-Some-Routers-PSV-2019-0015
CVE ID: CVE-2020-35843 State: PUBLISHED Published: 2021-01-25T19:07:32 Last Updated: 2024-08-04T17:16:12.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/DmitriyMelikov - https://github.com/DmitryMeD/pentesting/blob/main/FastStone%20Image%20Viewer%207.5.md
CVE ID: CVE-2020-35844 State: PUBLISHED Published: 2021-01-25T19:09:47 Last Updated: 2024-08-04T17:16:12.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0xbe9c4. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/DmitriyMelikov - https://github.com/DmitryMeD/pentesting/blob/main/FastStone%20Image%20Viewer%207.5.md
CVE ID: CVE-2020-35845 State: PUBLISHED Published: 2021-01-25T19:11:15 Last Updated: 2024-08-04T17:16:12.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x96cf. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/DmitriyMelikov - https://github.com/DmitryMeD/pentesting/blob/main/FastStone%20Image%20Viewer%207.5.md
CVE ID: CVE-2020-35846 State: PUBLISHED Published: 2020-12-30T00:39:15 Last Updated: 2024-08-04T17:16:12.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. Additional Analyst Notes: - CVE Program Container: References: - https://getcockpit.com/ - https://github.com/agentejo/cockpit/commit/79fc9631ffa29146e3124ceaf99879b92e1ef24b - https://github.com/agentejo/cockpit/commit/33e7199575631ba1f74cba6b16b10c820bec59af - https://github.com/agentejo/cockpit/commit/2a385af8d80ed60d40d386ed813c1039db00c466 - http://packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remot
8d80ed60d40d386ed813c1039db00c466 - http://packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remote-Command-Execution.html
CVE ID: CVE-2020-35847 State: PUBLISHED Published: 2020-12-30T00:38:56 Last Updated: 2024-08-04T17:16:12.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. Additional Analyst Notes: - CVE Program Container: References: - https://getcockpit.com/ - https://github.com/agentejo/cockpit/commit/79fc9631ffa29146e3124ceaf99879b92e1ef24b - https://github.com/agentejo/cockpit/commit/33e7199575631ba1f74cba6b16b10c820bec59af - https://github.com/agentejo/cockpit/commit/2a385af8d80ed60d40d386ed813c1039db00c466 - http://packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injecti
/2a385af8d80ed60d40d386ed813c1039db00c466 - http://packetstormsecurity.com/files/162282/Cockpit-CMS-0.11.1-NoSQL-Injection-Remote-Command-Execution.html - http://packetstormsecurity.com/files/163762/Cockpit-CMS-0.11.1-NoSQL-Injection.html
CVE ID: CVE-2020-35848 State: PUBLISHED Published: 2020-12-30T00:39:05 Last Updated: 2024-08-04T17:16:12.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function. Additional Analyst Notes: - CVE Program Container: References: - https://getcockpit.com/ - https://github.com/agentejo/cockpit/commit/79fc9631ffa29146e3124ceaf99879b92e1ef24b - https://github.com/agentejo/cockpit/commit/33e7199575631ba1f74cba6b16b10c820bec59af - https://github.com/agentejo/cockpit/commit/2a385af8d80ed60d40d386ed813c1039db00c466 - http://packetstormsecurity.com/files/163762/Cockpit-CMS-0.11.1-NoSQL-Injection
a385af8d80ed60d40d386ed813c1039db00c466 - http://packetstormsecurity.com/files/163762/Cockpit-CMS-0.11.1-NoSQL-Injection.html
CVE ID: CVE-2020-35849 State: PUBLISHED Published: 2020-12-30T18:04:07 Last Updated: 2024-08-04T17:16:12.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugnotes revisions, gaining access to potentially confidential information via the bugnote_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=27370
CVE ID: CVE-2020-35850 State: PUBLISHED Published: 2020-12-30T01:27:02 Last Updated: 2024-08-04T17:16:13.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/passtheticket/vulnerability-research/blob/main/cockpitProject/README.md - https://github.com/cockpit-project/cockpit/issues/15077
CVE ID: CVE-2020-35851 State: PUBLISHED Published: 2020-12-31T07:45:52.468441Z Last Updated: 2024-09-17T04:25:22.980Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: HGiga Products: MailSherlock MSR45/SSR45 Problem Types: CWE-78 Description: HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.twcert.org.tw/en/cp-139-4264-f10f4-2.html
CVE ID: CVE-2020-35852 State: PUBLISHED Published: 2021-02-23T00:51:55 Last Updated: 2024-08-04T17:16:13.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with SVG, XML file in Chatbox. There is no restriction on file upload in Chatbox which leads to stored XSS. Additional Analyst Notes: - CVE Program Container: References: - https://getgist.com - https://getgist.com/chatbot-software/ - https://github.com/riteshgohil/My_CVE/blob/main/CVE-2020-35852.md
CVE ID: CVE-2020-35853 State: PUBLISHED Published: 2021-01-25T14:40:56 Last Updated: 2024-08-04T17:16:12.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: 4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL. This vulnerability can result in an attacker to inject the XSS payload into the IMAGE URL. Each time a user visits that URL, the XSS triggers and the attacker can be able to steal the cookie according to the crafted payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/49339
CVE ID: CVE-2020-35854 State: PUBLISHED Published: 2021-01-25T14:41:16 Last Updated: 2024-08-04T17:16:12.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Textpattern 4.8.4 is affected by cross-site scripting (XSS) in the Body parameter. Additional Analyst Notes: - CVE Program Container: References: - http://textpattern.com - https://www.textpattern.co/demo - https://riteshgohil-25.medium.com/textpattern-4-8-4-is-affected-by-cross-site-scripting-xss-in-the-body-parameter-b9a3d7da2a88
CVE ID: CVE-2020-35856 State: PUBLISHED Published: 2021-03-26T15:17:14 Last Updated: 2024-08-04T17:16:12.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: SolarWinds Orion Platform before 2020.2.5 allows stored XSS attacks by an administrator on the Customize View page. Additional Analyst Notes: - CVE Program Container: References: - https://support.solarwinds.com/SuccessCenter/s/ - https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Release_Notes/Orion_Platform_2020-2-5_release_notes.htm
CVE ID: CVE-2020-35857 State: PUBLISHED Published: 2020-12-31T00:00:00 Last Updated: 2024-08-04T17:16:12.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0001.html - https://github.com/bluejekyll/trust-dns/commit/8b9eab05795fdc098976262853b2498055c7a8f3
CVE ID: CVE-2020-35858 State: PUBLISHED Published: 2020-12-31T08:30:51 Last Updated: 2024-08-04T17:16:12.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., ARM). Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0002.html
CVE ID: CVE-2020-35859 State: PUBLISHED Published: 2020-12-31T08:30:37 Last Updated: 2024-08-04T17:16:12.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs can experience memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0004.html
CVE ID: CVE-2020-35860 State: PUBLISHED Published: 2020-12-31T08:30:21 Last Updated: 2024-08-04T17:16:13.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0005.html
CVE ID: CVE-2020-35861 State: PUBLISHED Published: 2020-12-31T08:30:10 Last Updated: 2024-08-04T17:16:12.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0006.html
CVE ID: CVE-2020-35862 State: PUBLISHED Published: 2020-12-31T08:29:57 Last Updated: 2024-08-04T17:16:12.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0007.html
CVE ID: CVE-2020-35863 State: PUBLISHED Published: 2020-12-31T08:29:46 Last Updated: 2024-08-04T17:16:13.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0008.html
CVE ID: CVE-2020-35864 State: PUBLISHED Published: 2020-12-31T08:29:31 Last Updated: 2024-08-04T17:16:12.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0009.html
CVE ID: CVE-2020-35865 State: PUBLISHED Published: 2020-12-31T08:29:20 Last Updated: 2024-08-04T17:16:12.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the os_str_bytes crate before 2.0.0 for Rust. It has false expectations about char::from_u32_unchecked behavior. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0012.html
CVE ID: CVE-2020-35866 State: PUBLISHED Published: 2020-12-31T08:29:10 Last Updated: 2024-08-04T17:16:12.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0014.html - https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
CVE ID: CVE-2020-35867 State: PUBLISHED Published: 2020-12-31T08:29:00 Last Updated: 2024-08-04T17:16:12.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0014.html - https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
CVE ID: CVE-2020-35868 State: PUBLISHED Published: 2020-12-31T08:28:48 Last Updated: 2024-08-04T17:16:13.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0014.html - https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
CVE ID: CVE-2020-35869 State: PUBLISHED Published: 2020-12-31T08:28:34 Last Updated: 2024-08-04T17:16:12.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because rusqlite::trace::log mishandles format strings. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0014.html - https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
CVE ID: CVE-2020-35870 State: PUBLISHED Published: 2020-12-31T08:28:26 Last Updated: 2024-08-04T17:16:12.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0014.html - https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
CVE ID: CVE-2020-35871 State: PUBLISHED Published: 2020-12-31T08:28:15 Last Updated: 2024-08-04T17:16:12.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0014.html - https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
CVE ID: CVE-2020-35872 State: PUBLISHED Published: 2020-12-31T08:28:05 Last Updated: 2024-08-04T17:16:12.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0014.html - https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
CVE ID: CVE-2020-35873 State: PUBLISHED Published: 2020-12-31T08:27:54 Last Updated: 2024-08-04T17:16:13.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0014.html - https://github.com/rusqlite/rusqlite/releases/tag/0.23.0
CVE ID: CVE-2020-35874 State: PUBLISHED Published: 2020-12-31T08:27:43 Last Updated: 2024-08-04T17:16:13.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0017.html
CVE ID: CVE-2020-35875 State: PUBLISHED Published: 2020-12-31T08:27:32 Last Updated: 2024-08-04T17:16:12.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust. Excessive memory usage may occur when data arrives quickly. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0019.html
CVE ID: CVE-2020-35876 State: PUBLISHED Published: 2020-12-31T08:27:20 Last Updated: 2024-08-04T17:16:13.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0021.html
CVE ID: CVE-2020-35877 State: PUBLISHED Published: 2020-12-31T08:27:08 Last Updated: 2024-08-04T17:16:12.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0022.html
CVE ID: CVE-2020-35878 State: PUBLISHED Published: 2020-12-31T08:26:58 Last Updated: 2024-08-04T17:16:13.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of the dropping of uninitialized memory. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0022.html
CVE ID: CVE-2020-35879 State: PUBLISHED Published: 2020-12-31T08:26:47 Last Updated: 2024-08-04T17:16:12.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the rulinalg crate through 2020-02-11 for Rust. There are incorrect lifetime-boundary definitions for RowMut::raw_slice and RowMut::raw_slice_mut. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0023.html
CVE ID: CVE-2020-35880 State: PUBLISHED Published: 2020-12-31T08:26:34 Last Updated: 2024-08-04T17:16:13.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2020-0025.html