rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-36327 
Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chosen, even if the intended choice was a private gem that is a dependency of another private gem that is explicitly depended on by the application. NOTE: it is not correct to use CVE-2021-24105 for every "Dependency Confusion" issue in every product.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-04-29T02:28:54.000Z
CVE-2020-36328 
A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: n/a
product: libwebp
Published: 2021-05-21T16:14:21.000Z
CVE-2020-36329 
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Problem types: cwe_id: CWE-416
description: CWE-416
Affected products: vendor: n/a
product: libwebp
Published: 2021-05-21T16:15:10.000Z
CVE-2020-36330 
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: libwebp
Published: 2021-05-21T16:19:44.000Z
CVE-2020-36331 
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: n/a
product: libwebp
Published: 2021-05-21T16:20:33.000Z
CVE-2020-36332 
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
Problem types: cwe_id: CWE-20
description: CWE-20->CWE-400
Affected products: vendor: n/a
product: libwebp
Published: 2021-05-21T16:21:29.000Z
CVE-2020-36333 
themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T03:12:12.000Z
CVE-2020-36334 
themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-05T03:11:59.000Z
CVE-2020-36363 
Amazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, which some entities consider to be weak ciphers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-12T21:13:30.000Z
CVE-2020-36364 
An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal (for copy and delete actions) in the ImportController.Create method via a TempFileName field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-19T18:57:20.000Z
CVE-2020-36365 
Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open redirect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-19T18:57:46.000Z
CVE-2020-36366 
Stack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:37:17.000Z
CVE-2020-36367 
Stack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:38:24.000Z
CVE-2020-36368 
Stack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:38:11.000Z
CVE-2020-36369 
Stack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:38:49.000Z
CVE-2020-36370 
Stack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:38:01.000Z
CVE-2020-36371 
Stack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:37:33.000Z
CVE-2020-36372 
Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:38:37.000Z
CVE-2020-36373 
Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:39:09.000Z
CVE-2020-36374 
Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:39:01.000Z
CVE-2020-36375 
Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-05-28T20:39:18.000Z
CVE-2020-36376 
An issue was discovered in the list function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-31T19:51:55.000Z
CVE-2020-36377 
An issue was discovered in the dump function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-31T19:51:56.000Z
CVE-2020-36378 
An issue was discovered in the packageCmd function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-31T19:51:56.000Z
CVE-2020-36379 
An issue was discovered in the remove function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-31T19:51:58.000Z
CVE-2020-36380 
An issue was discovered in the crunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-31T19:51:57.000Z
CVE-2020-36381 
An issue was discovered in the singleCrunch function in shenzhim aaptjs 1.3.1, allows attackers to execute arbitrary code via the filePath parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-10-31T19:51:58.000Z
CVE-2020-36382 
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.
Problem types: cwe_id: CWE-754
description: CWE-754: Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: n/a
product: OpenVPN Access Server
Published: 2021-06-04T10:47:15.000Z
CVE-2020-36383 
PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R
version: 3.1
Published: 2021-06-07T10:19:38.000Z
CVE-2020-36384 
PageLayer before 1.3.5 allows reflected XSS via color settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:C/UI:R
version: 3.1
Published: 2021-06-07T10:19:27.000Z
CVE-2020-36385 
An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after-free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-07T00:00:00.000Z
CVE-2020-36386 
An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-07T19:20:02.000Z
CVE-2020-36387 
An issue was discovered in the Linux kernel before 5.8.2. fs/io_uring.c has a use-after-free related to io_async_task_func and ctx reference holding, aka CID-6d816e088c35.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-07T19:19:39.000Z
CVE-2020-36388 
In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-17T00:00:00.000Z
CVE-2020-36389 
In CiviCRM before 5.28.1 and CiviCRM ESR before 5.27.5 ESR, the CKEditor configuration form allows CSRF.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-17T00:00:00.000Z
CVE-2020-36394 
pam_setquota.c in the pam_setquota module before 2020-05-29 for Linux-PAM allows local attackers to set their quota on an arbitrary filesystem, in certain situations where the attacker's home directory is a FUSE filesystem mounted under /home.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-06-22T20:43:26.000Z
CVE-2020-36395 
A stored cross site scripting (XSS) vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:26.000Z
CVE-2020-36396 
A stored cross site scripting (XSS) vulnerability in the /admin/roles/role component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:28.000Z
CVE-2020-36397 
A stored cross site scripting (XSS) vulnerability in the /admin/contact/contact component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:29.000Z
CVE-2020-36398 
A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "Campaign" field under the "Send a campaign" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:30.000Z
CVE-2020-36399 
A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "rule1" parameter under the "Bounce Rules" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:32.000Z
CVE-2020-36400 
ZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcp_read, a different vulnerability than CVE-2021-20235.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:50:56.000Z
CVE-2020-36401 
mruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:51:06.000Z
CVE-2020-36402 
Solidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver. NOTE: c39a5e2b7a3fabbf687f53a2823fc087be6c1a7e is cited in the OSV "fixed" field but does not have a code change.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:51:21.000Z
CVE-2020-36403 
HTSlib through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from vcf_parse and vcf_read).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:51:43.000Z
CVE-2020-36404 
Keystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl<llvm_ks::MCFixup>::~SmallVectorImpl.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:52:05.000Z
CVE-2020-36405 
Keystone Engine 0.9.2 has a use-after-free in llvm_ks::X86Operand::getToken.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:52:16.000Z
CVE-2020-36406 
uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree (called from uWS::TopicTree::unsubscribeAll). NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application (that uses uWebSockets) should not be allowing the large number of triggered topics to accumulate
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:52:36.000Z
CVE-2020-36407 
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-01T02:53:11.000Z
CVE-2020-36408 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:33.000Z
CVE-2020-36409 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Category" parameter under the "Categories" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:34.000Z
CVE-2020-36410 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Email address to receive notification of news submission" parameter under the "Options" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:36.000Z
CVE-2020-36411 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Path for the {page_image} tag:" or "Path for thumbnail field:" parameters under the "Content Editing Settings" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:38.000Z
CVE-2020-36412 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Search Text" field under the "Admin Search" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:40.000Z
CVE-2020-36413 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Exclude these IP addresses from the "Site Down" status" parameter under the "Maintenance Mode" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:54.000Z
CVE-2020-36414 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "URL (slug)" or "Extra" fields under the "Add Article" feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:56.000Z
CVE-2020-36415 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Stylesheet" parameter under the "Stylesheets" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:51:58.000Z
CVE-2020-36416 
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Design" parameter under the "Designs" module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-02T17:52:00.000Z
CVE-2020-36420 
Polipo through 1.1.1, when NDEBUG is omitted, allows denial of service via a reachable assertion during parsing of a malformed Range header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-14T23:23:21.000Z
CVE-2020-36421 
An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T00:00:00.000Z
CVE-2020-36422 
An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T00:00:00.000Z
CVE-2020-36423 
An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext because a certain Lucky 13 countermeasure doesn't properly consider the case of a hardware accelerator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T00:00:00.000Z
CVE-2020-36424 
An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T00:00:00.000Z
CVE-2020-36425 
An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T00:00:00.000Z
CVE-2020-36426 
An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T00:00:00.000Z
CVE-2020-36427 
GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-19T15:20:01.000Z
CVE-2020-36428 
matio (aka MAT File I/O Library) 1.5.18 through 1.5.21 has a heap-based buffer overflow in ReadInt32DataDouble (called from ReadInt32Data and Mat_VarRead4).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T06:47:45.000Z
CVE-2020-36429 
Variant_encodeJson in open62541 1.x before 1.0.4 has an out-of-bounds write for a large recursion depth.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T06:47:30.000Z
CVE-2020-36430 
libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T06:47:14.000Z
CVE-2020-36431 
Unicorn Engine 1.0.2 has an out-of-bounds write in helper_wfe_arm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-07-20T06:46:56.000Z
CVE-2020-36432 
An issue was discovered in the alg_ds crate through 2020-08-25 for Rust. There is a drop of uninitialized memory in Matrix::new().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:19:47.000Z
CVE-2020-36433 
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:19:34.000Z
CVE-2020-36434 
An issue was discovered in the sys-info crate before 0.8.0 for Rust. sys_info::disk_info calls can trigger a double free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:19:21.000Z
CVE-2020-36435 
An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:19:07.000Z
CVE-2020-36436 
An issue was discovered in the unicycle crate before 0.7.1 for Rust. PinSlab<T> and Unordered<T, S> do not have bounds on their Send and Sync traits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:18:56.000Z
CVE-2020-36437 
An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and Sync for QueueSender<T>.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:18:44.000Z
CVE-2020-36438 
An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and Sync traits.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2021-08-08T05:18:32.000Z