Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-20946 State: PUBLISHED Published: 2019-08-01T16:14:38 Last Updated: 2024-08-05T12:19:26.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2018-20947 State: PUBLISHED Published: 2019-08-01T16:15:28 Last Updated: 2024-08-05T12:19:26.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2018-20948 State: PUBLISHED Published: 2019-08-01T16:16:21 Last Updated: 2024-08-05T12:19:26.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration (SEC-383). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2018-20949 State: PUBLISHED Published: 2019-08-01T16:17:13 Last Updated: 2024-08-05T12:19:26.334Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor (SEC-385). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2018-20950 State: PUBLISHED Published: 2019-08-01T16:17:58 Last Updated: 2024-08-05T12:19:26.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer (SEC-386). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2018-20951 State: PUBLISHED Published: 2019-08-01T16:18:42 Last Updated: 2024-08-05T12:19:27.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.27 allows self XSS in WHM Spamd Startup Config (SEC-387). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2018-20952 State: PUBLISHED Published: 2019-08-01T16:19:30 Last Updated: 2024-08-05T12:19:26.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor (SEC-388). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2018-20953 State: PUBLISHED Published: 2019-08-01T16:20:17 Last Updated: 2024-08-05T12:19:26.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel before 68.0.27 allows self XSS in the WHM listips interface (SEC-389). Additional Analyst Notes: - CVE Program Container: References: - https://documentation.cpanel.net/display/CL/68+Change+Log
CVE ID: CVE-2018-20954 State: PUBLISHED Published: 2019-08-08T20:13:13 Last Updated: 2024-08-05T12:19:26.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mailpile/Mailpile/pull/2145 - https://github.com/mailpile/Mailpile/commit/49b64f62ade9ade3dff9337c7bbc1171eab3d59e - https://github.com/mailpile/Mailpile/compare/1.0.0rc3...1.0.0rc4
CVE ID: CVE-2018-20955 State: PUBLISHED Published: 2019-08-08T20:10:19 Last Updated: 2024-08-05T12:19:26.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swann SWWHD-INTCAM-HD devices have the twipc root password, leading to FTP access as root. NOTE: all affected customers were migrated by 2020-08-31. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/hacking-swann-home-security-camera-video/ - https://www.swann.com/au/safe-by-swann-upgrade
CVE ID: CVE-2018-20956 State: PUBLISHED Published: 2019-08-08T20:09:38 Last Updated: 2024-08-05T12:19:27.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/hacking-swann-home-security-camera-video/ - https://www.swann.com/au/safe-by-swann-upgrade
CVE ID: CVE-2018-20957 State: PUBLISHED Published: 2019-08-08T20:08:36 Last Updated: 2024-08-05T12:19:27.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 allows replay attacks. Additional Analyst Notes: - CVE Program Container: References: - https://tapplock.com/notice/20180612/ - https://www.pentestpartners.com/security-blog/totally-pwning-the-tapplock-smart-lock/
CVE ID: CVE-2018-20958 State: PUBLISHED Published: 2019-08-07T12:43:00 Last Updated: 2024-08-05T12:19:26.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Bluetooth Low Energy (BLE) subsystem on Tapplock devices before 2018-06-12 relies on Key1 and SerialNo for unlock operations; however, these are derived from the MAC address, which is broadcasted by the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/totally-pwning-the-tapplock-smart-lock/ - https://tapplock.com/notice/20180612/
CVE ID: CVE-2018-20959 State: PUBLISHED Published: 2019-08-07T12:47:34 Last Updated: 2024-08-05T12:19:27.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jura E8 devices lack Bluetooth connection security. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/hacking-the-nespresso-prodigio-and-jura-e8-coffee-machines/
CVE ID: CVE-2018-20960 State: PUBLISHED Published: 2019-08-08T20:07:16 Last Updated: 2024-08-05T12:19:26.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nespresso Prodigio devices lack Bluetooth connection security. Additional Analyst Notes: - CVE Program Container: References: - https://www.pentestpartners.com/security-blog/hacking-the-nespresso-prodigio-and-jura-e8-coffee-machines/
CVE ID: CVE-2018-20961 State: PUBLISHED Published: 2019-08-07T14:48:50 Last Updated: 2024-08-05T12:19:27.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349f - https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fafcfdf6377b18b2a726ea554d6e593ba44349f - https://cdn.kerne
nel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fafcfdf6377b18b2a726ea554d6e593ba44349f - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4 - https://seclists.org/bugtraq/2019/Aug/48 - http://packetstormsecurity.com/files/154228/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://support.f5.com/csp/article/K58502654 - https://security.netapp.com/advisory/ntap-20190905-0002/ - https://usn.ubuntu.com/4145-1/ - https://support.f5.com/csp/article/K58502654?utm_source=f5support&amp%3Butm_medium=RSS - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html
CVE ID: CVE-2018-20962 State: PUBLISHED Published: 2019-08-08T19:51:49 Last Updated: 2024-08-05T12:19:27.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Laravel-Backpack/CRUD/compare/3.4.8...3.4.9 - https://github.com/Laravel-Backpack/CRUD/issues/1297 - https://github.com/Laravel-Backpack/CRUD/blob/master/CHANGELOG.md - https://github.com/Laravel-Backpack/CRUD/commit/8b6bd0a2d489a4690f6b1d7ace67e2f07f5f0cc6
CVE ID: CVE-2018-20963 State: PUBLISHED Published: 2019-08-13T16:46:45 Last Updated: 2024-08-05T12:19:27.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-to-email plugin before 1.2.66 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-to-email/#developers
CVE ID: CVE-2018-20964 State: PUBLISHED Published: 2019-08-13T16:46:13 Last Updated: 2024-08-05T12:19:27.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-to-email plugin before 1.2.66 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-to-email/#developers
CVE ID: CVE-2018-20965 State: PUBLISHED Published: 2019-08-12T15:25:56 Last Updated: 2024-08-05T12:19:27.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ultimate-member plugin before 2.0.4 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ultimate-member/#developers - https://wpvulndb.com/vulnerabilities/9608
CVE ID: CVE-2018-20966 State: PUBLISHED Published: 2019-08-12T15:19:19 Last Updated: 2024-08-05T12:19:26.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The woocommerce-jetpack plugin before 3.8.0 for WordPress has XSS in the Products Per Page feature. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/woocommerce-jetpack/#developers
CVE ID: CVE-2018-20967 State: PUBLISHED Published: 2019-08-14T15:21:49 Last Updated: 2024-08-05T12:19:26.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-ultimate-csv-importer plugin before 5.6.1 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-ultimate-csv-importer/#developers
CVE ID: CVE-2018-20968 State: PUBLISHED Published: 2019-08-14T15:21:13 Last Updated: 2024-08-05T12:19:27.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-ultimate-exporter plugin before 1.4.2 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-ultimate-exporter/#developers
CVE ID: CVE-2018-20969 State: PUBLISHED Published: 2019-08-16T03:36:12 Last Updated: 2024-08-05T12:19:26.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is specific to ed, and is unrelated to a shell metacharacter. Additional Analyst Notes: - CVE Program Container: References: - https://git.savannah.gnu.org/cgit/patch.git/commit/?id=3fcd042d26d70856e826a42b5f93dc4854d80bf0 - https://seclists.org/bugtraq/2019/Aug/29 - http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal
ts.org/bugtraq/2019/Aug/29 - http://packetstormsecurity.com/files/154124/GNU-patch-Command-Injection-Directory-Traversal.html - https://github.com/irsl/gnu-patch-vulnerabilities - https://access.redhat.com/errata/RHSA-2019:2798 - https://access.redhat.com/errata/RHSA-2019:2964 - https://access.redhat.com/errata/RHSA-2019:3757 - https://access.redhat.com/errata/RHSA-2019:3758 - https://access.redhat.com/errata/RHSA-2019:4061
CVE ID: CVE-2018-20970 State: PUBLISHED Published: 2019-08-21T18:15:39 Last Updated: 2024-08-05T12:19:27.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/pdf-print/#developers
CVE ID: CVE-2018-20971 State: PUBLISHED Published: 2019-08-16T20:21:56 Last Updated: 2024-08-05T12:19:26.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/church-admin/#developers
CVE ID: CVE-2018-20972 State: PUBLISHED Published: 2019-08-16T20:21:25 Last Updated: 2024-08-05T12:19:27.013Z Vendors: n/a Products: n/a Problem Types: n/a Description: The companion-auto-update plugin before 3.2.1 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/companion-auto-update/#developers
CVE ID: CVE-2018-20973 State: PUBLISHED Published: 2019-08-16T20:21:00 Last Updated: 2024-08-05T12:19:27.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/companion-auto-update/#developers
CVE ID: CVE-2018-20974 State: PUBLISHED Published: 2019-08-16T20:15:17 Last Updated: 2024-08-05T12:19:27.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: The js-jobs plugin before 1.0.7 for WordPress has CSRF. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/js-jobs/#developers
CVE ID: CVE-2018-20975 State: PUBLISHED Published: 2019-08-20T12:14:26 Last Updated: 2024-08-05T12:19:26.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fat Free CRM before 0.18.1 has XSS in the tags_helper in app/helpers/tags_helper.rb. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fatfreecrm/fat_free_crm/releases/tag/v0.18.1 - https://github.com/fatfreecrm/fat_free_crm/commit/6d60bc8ed010c4eda05d6645c64849f415f68d65 - https://github.com/fatfreecrm/fat_free_crm/compare/v0.17.3...v0.18.1
CVE ID: CVE-2018-20976 State: PUBLISHED Published: 2019-08-19T01:52:55 Last Updated: 2024-08-05T12:19:27.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c9fbd7bbc23dbdd73364be4d045e5d3612cf6e82 - https://security.netapp.com/advisory/ntap-20190905-0002/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg000
g/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://lists.debian.org/debian-lts-announce/2019/09/msg00025.html - https://usn.ubuntu.com/4144-1/ - https://usn.ubuntu.com/4145-1/ - https://support.f5.com/csp/article/K10269585?utm_source=f5support&amp%3Butm_medium=RSS - http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.html - https://seclists.org/bugtraq/2019/Nov/11 - http://packetstormsecurity.com/files/155212/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://access.redhat.com/errata/RHSA-2020:0178 - https://access.redhat.com/errata/RHSA-2020:0543
kernel-Updates.html - https://access.redhat.com/errata/RHSA-2020:0178 - https://access.redhat.com/errata/RHSA-2020:0543 - https://access.redhat.com/errata/RHSA-2020:0592 - https://access.redhat.com/errata/RHSA-2020:0609 - https://lists.debian.org/debian-lts-announce/2020/03/msg00001.html - https://access.redhat.com/errata/RHSA-2020:0661
CVE ID: CVE-2018-20977 State: PUBLISHED Published: 2019-08-21T18:12:47 Last Updated: 2024-08-05T12:19:26.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/all-in-one-schemaorg-rich-snippets/#developers
CVE ID: CVE-2018-20978 State: PUBLISHED Published: 2019-08-20T15:01:07 Last Updated: 2024-08-05T12:19:27.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-all-import plugin before 3.4.7 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-all-import/#developers
CVE ID: CVE-2018-20979 State: PUBLISHED Published: 2019-08-22T12:36:19 Last Updated: 2024-08-05T12:19:26.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capability_type mishandling in register_post_type. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contact-form-7/#developers
CVE ID: CVE-2018-20980 State: PUBLISHED Published: 2019-08-22T12:37:38 Last Updated: 2024-08-05T12:19:27.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ninja-forms/#developers
CVE ID: CVE-2018-20981 State: PUBLISHED Published: 2019-08-22T12:40:46 Last Updated: 2024-08-05T12:19:27.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ninja-forms/#developers
CVE ID: CVE-2018-20982 State: PUBLISHED Published: 2019-08-22T12:58:07 Last Updated: 2024-08-05T12:19:26.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/media-library-assistant/#developers
CVE ID: CVE-2018-20983 State: PUBLISHED Published: 2019-08-22T13:15:35 Last Updated: 2024-08-05T12:19:27.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-retina-2x plugin before 5.2.3 for WordPress has XSS. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-retina-2x/#developers
CVE ID: CVE-2018-20984 State: PUBLISHED Published: 2019-08-22T13:29:14 Last Updated: 2024-08-05T12:19:26.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: The patreon-connect plugin before 1.2.2 for WordPress has Object Injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/patreon-connect/#developers
CVE ID: CVE-2018-20985 State: PUBLISHED Published: 2019-08-22T13:34:03 Last Updated: 2024-08-05T12:19:27.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-payeezy-pay/#developers
CVE ID: CVE-2018-20986 State: PUBLISHED Published: 2019-08-22T19:38:42 Last Updated: 2024-08-05T12:19:27.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/advanced-custom-fields/#developers - https://www.advancedcustomfields.com/blog/acf-5-7-8-release/ - https://www2.deloitte.com/de/de/pages/risk/articles/wordpress-plugin-xss.html - https://www.advancedcustomfields.com/changelog/
CVE ID: CVE-2018-20987 State: PUBLISHED Published: 2019-08-22T19:04:34 Last Updated: 2024-08-05T12:19:27.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/newsletters-lite/#developers - https://wpvulndb.com/vulnerabilities/9627
CVE ID: CVE-2018-20988 State: PUBLISHED Published: 2019-08-22T18:53:29 Last Updated: 2024-08-05T12:19:27.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wpgform/#developers
CVE ID: CVE-2018-20989 State: PUBLISHED Published: 2019-08-26T17:17:57 Last Updated: 2024-08-05T12:19:27.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the untrusted crate before 0.6.2 for Rust. Error handling can trigger an integer underflow and panic. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0001.html
CVE ID: CVE-2018-20990 State: PUBLISHED Published: 2019-08-26T12:39:33 Last Updated: 2024-08-05T12:19:27.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0002.html
CVE ID: CVE-2018-20991 State: PUBLISHED Published: 2019-08-26T14:23:19 Last Updated: 2024-08-05T12:19:27.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the smallvec crate before 0.6.3 for Rust. The Iterator implementation mishandles destructors, leading to a double free. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0003.html
CVE ID: CVE-2018-20992 State: PUBLISHED Published: 2019-08-26T12:31:30 Last Updated: 2024-08-05T12:19:27.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the claxon crate before 0.4.1 for Rust. Uninitialized memory can be exposed because certain decode buffer sizes are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0004.html
CVE ID: CVE-2018-20993 State: PUBLISHED Published: 2019-08-26T12:32:43 Last Updated: 2024-08-05T12:19:27.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the yaml-rust crate before 0.4.1 for Rust. There is uncontrolled recursion during deserialization. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0006.html
CVE ID: CVE-2018-20994 State: PUBLISHED Published: 2019-08-26T12:34:16 Last Updated: 2024-08-05T12:19:27.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the trust-dns-proto crate before 0.5.0-alpha.3 for Rust. There is infinite recursion because DNS message compression is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0007.html
CVE ID: CVE-2018-20995 State: PUBLISHED Published: 2019-08-26T17:14:25 Last Updated: 2024-08-05T12:19:27.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the slice-deque crate before 0.1.16 for Rust. move_head_unchecked allows memory corruption because deque updates are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0008.html
CVE ID: CVE-2018-20996 State: PUBLISHED Published: 2019-08-26T17:13:10 Last Updated: 2024-08-05T12:19:27.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the crossbeam crate before 0.4.1 for Rust. There is a double free because of destructor mishandling. Additional Analyst Notes: - CVE Program Container: References: - https://rustsec.org/advisories/RUSTSEC-2018-0009.html