79 matches found
PT-2023-32968 · Unknown · Rustls-Webpki
Name of the Vulnerable Software and Affected Versions: rustls-webpki versions prior to 0.3.7 Description: The issue arises during startup when an attacker can intercept traffic to and from NTS key exchange servers, triggering an expensive key validation process due to a vulnerability in webpki...
GHSA-VXMM-CWH2-Q762 Vyper's nonpayable default functions are sometimes payable
Impact in contracts with at least one regular nonpayable function, due to the callvalue check being inside of the selector section, it is possible to send funds to the default function by using less than 4 bytes of calldata, even if the default function is marked nonpayable. this applies to...
PT-2023-22826 · Vyper · Vyper
Name of the Vulnerable Software and Affected Versions: Vyper versions 0.3.1 through 0.3.7 Description: The Vyper compiler generates the wrong bytecode in versions 0.3.1 through 0.3.7. Any contract that uses the raw call with revert on failure=False and max outsize=0 receives the wrong response fr...
SUSE CVE-2020-35905
An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations in safe code...
AZL-45375 CVE-2021-38561 affecting package containernetworking-plugins for versions less than 1.6.1-4
golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack...
blst (=0.3.7), zeroize (>=0.6.0 <=0.7.0) potentially affected by CVE-2021-45706 via zeroize_derive (>=0.1.0 <=0.7.0)
zeroizederive CARGO version =0.1.0, =0.6.0, =0.7.0 Source cves: CVE-2021-45706 Source advisory: OSV:GHSA-C5HX-W945-J4PQ...
GHSA-4J54-MXF6-WXX2 OS Command Injection in pomelo-monitor
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
Content injection in marked
Versions 0.3.7 and earlier of marked When mangling is disabled via option mangle don't escape target href. This allow attacker to inject arbitrary html-event into resulting a tag...
Rust Competition Condition Problem Vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust futures-util crate before 0.3.7, which stems from the fact that MutexGuard::map can lead to data contention in certain closure cases in safe code...
SQL Injection Vulnerability in Jinwei Mobile Mall v0.3.7
Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...
kay (>=0.1.0 <=0.5.1) potentially affected by CVE-2020-36433 via chunky (>=0.1.4 <=0.3.7)
chunky CARGO version =0.1.4, =0.1.0, =0.5.1 Source cves: CVE-2020-36433 Source advisory: OSV:RUSTSEC-2020-0035...
CVE-2020-7620
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
CVE-2020-7620
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params...
OPENSUSE-SU-2019:1997-1 Security update for neovim
This update for neovim fixes the following issues: neovim was updated to version 0.3.7: CVE-2019-12735: source should check sandbox boo1137443 genappimage.sh: migrate to linuxdeploy Version Update to version 0.3.5: options: properly reset directories on 'autochdir' Remove MSVC optimization...
Security update for neovim (important)
openSUSE Security Update: Security update for neovim Announcement ID: openSUSE-SU-2019:1997-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update f...
OPENSUSE-SU-2019:1796-1 Security update for neovim
This update for neovim fixes the following issues: neovim was updated to version 0.3.7: CVE-2019-12735: source should check sandbox boo1137443 genappimage.sh: migrate to linuxdeploy Version Update to version 0.3.5: options: properly reset directories on 'autochdir' Remove MSVC optimization...
OPENSUSE-SU-2019:1759-1 Security update for neovim
This update for neovim fixes the following issues: neovim was updated to version 0.3.7: CVE-2019-12735: source should check sandbox boo1137443 genappimage.sh: migrate to linuxdeploy Version Update to version 0.3.5: options: properly reset directories on 'autochdir' Remove MSVC optimization...
marked marked.js file denial of service vulnerability
marked is a Markdown parser and compiler written in JavaScript. A denial of service vulnerability exists in the marked.js file in marked 0.3.7 and earlier. A remote attacker can exploit this vulnerability to cause a denial of service server overload and crash with a maliciously crafted string...
Drake CMS 0.3.7 404.PHP Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23215/info Drake CMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts...
