timeout_io (>=0.2.0, <=0.2.7) potentially affected by CVE-2020-36438 via tiny_future (0.3.2)

tinyfuture CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on tinyfuture and may be impacted: - timeoutio =0.2.0, =0.2.7 Source cves: CVE-2020-36438 Source advisory: OSV:RUSTSEC-2020-0118...

RUSTSEC-2020-0071 Potential segfault in the time crate

Impact The affected functions set environment variables without synchronization. On Unix-like operating systems, this can crash in multithreaded programs. Programs may segfault due to dereferencing a dangling pointer if an environment variable is read in a different thread than the affected...

a2 (>=0.2.0, <=0.5.3), a3mo_lib (>=0.1.0, <=0.1.1) +7023 more potentially affected by CVE-2020-26235 via time (>=0.1.25, <=0.1.45)

time CARGO version =0.1.25, =0.2.0, =0.1.0, =0.1.7, =0.2.0-beta.4, =0.5.0, =0.1.1, =0.0.3, =0.1.0, =0.0.1, =0.0.7-alpha.3, =0.2.0 and more Source cves: CVE-2020-26235 Source advisory: OSV:RUSTSEC-2020-0071...

Potential segfault in the time crate

Impact The affected functions set environment variables without synchronization. On Unix-like operating systems, this can crash in multithreaded programs. Programs may segfault due to dereferencing a dangling pointer if an environment variable is read in a different thread than the affected...

specs (>=0.8.0, <=0.8.1) potentially affected by CVE-2020-36439 via ticketed_lock (0.1.0)

ticketedlock CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ticketedlock and may be impacted: - specs =0.8.0, =0.8.1 Source cves: CVE-2020-36439 Source advisory: OSV:RUSTSEC-2020-0119...

ruspiro-boot (>=0.3.0, <=0.3.2), ruspiro-console (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2020-36435 via ruspiro-singleton (>=0.0.2, <=0.3.1)

ruspiro-singleton CARGO version =0.0.2, =0.3.0, =0.0.2, =0.0.2, =0.3.0, =0.1.0, =0.0.2, =0.4.0, =0.0.2, =0.3.1 Source cves: CVE-2020-36435 Source advisory: OSV:RUSTSEC-2020-0115...

canonical (>=0.4.1, <=0.5.3), canonical_collections (0.4.0) +11 more potentially affected by CVE-2020-36469 via appendix (0.2.2)

appendix CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on appendix and may be impacted: - canonical =0.4.1, =0.4.0, =0.4.3, =0.4.0, =0.6.0, =0.1.0, =0.18.0, =0.11.0, =0.4.0, =0.6.0, =0.7.0 - rusk-abi 0.7.0 - rusk-vm 0.12.0-rc.0 Sourc...

alkyne (0.1.0), dioxus-core (0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0, <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:RUSTSEC-2020-0136...

rustracts (0.2.0) potentially affected by CVE-2020-36454 via parc (1.0.1)

parc CARGO version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on parc and may be impacted: - rustracts 0.2.0 Source cves: CVE-2020-36454 Source advisory: OSV:RUSTSEC-2020-0134...

acheron (0.1.0), actix_web_metrics_mw (>=0.0.1, <=0.3.1) +81 more potentially affected by CVE-2020-36204 via im (>=12.3.4, <=15.0.0)

im CARGO version =12.3.4, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.1.1, =0.37.0-pre, =0.4.0, =0.37.0-pre, =0.37.0-pre, =0.38.0 and more Source cves: CVE-2020-36204 Source advisory: OSV:RUSTSEC-2020-0096...

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5214 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:RUSTSEC-2020-0070...

cid (>=0.3.0, <=0.4.0), cid_fork_rlay (0.3.1) +58 more potentially affected by CVE-2020-35909 via multihash (>=0.8.0, <=0.10.1)

multihash CARGO version =0.8.0, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.1-alpha1, =0.0.9, =0.0.1-alpha1, =0.0.18 and more Source cves: CVE-2020-35909 Source advisory: OSV:RUSTSEC-2020-0068...

AudimexEE Cross-Site Scripting Vulnerability

AudimexEE is an auditing software for large organizations. A cross-site scripting vulnerability exists in AudimexEE versions prior to 14.1.1, which allows remote attackers to perform web script or html injection via action, cargo, panel, leading to data leakage if the uniqueerrornumbers security...

CVE-2020-28047

AudimexEE before 14.1.1 is vulnerable to Reflected XSS Cross-Site-Scripting. If the recommended security configuration parameter "uniqueerrornumbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage...

CVE-2020-28047: Improper Neutralization of Input During Web Page Generation

AudimexEE before 14.1.1 is vulnerable to Reflected XSS Cross-Site-Scripting. If the recommended security configuration parameter "uniqueerrornumbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage...

PT-2020-16910

Name of the Vulnerable Software and Affected Versions AudimexEE versions prior to 14.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via 'action, cargo, panel' parameters, potentially leading to data leakage. This occurs when the recommended security...

aesni (>=0.7.0, <=0.9.0), aries-askar (0.1.2) +28 more potentially affected by unknown CVE via stream-cipher (>=0.4.1, <=0.7.1)

stream-cipher CARGO version =0.4.1, =0.7.0, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.5.0, =0.2.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0-pre.1, =0.1.0, =0.3.1, =0.3.9 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0058...

cargo-martinique.com Cross Site Scripting vulnerability OBB-1410923

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

cargo-audit (>=0.3.0, <=0.4.0) potentially affected by unknown CVE via rustsec (>=0.7.5, <=0.8.0)

rustsec CARGO version =0.7.5, =0.3.0, =0.4.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0051...

RUSTSEC-2020-0051 Obsolete versions of the `rustsec` crate do not support the new V3 advisory format

If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...