RUSTSEC-2020-0051 Obsolete versions of the `rustsec` crate do not support the new V3 advisory format

If you are seeing this message, you are running an obsolete version of cargo-audit which does not support the new V3 advisory format. These versions are end-of-life. This advisory is a notice that that it will soon be unable to parse the advisory database. Please upgrade cargo-audit to a newer...

PT-2020-22683

Name of the Vulnerable Software and Affected Versions cargo-audit versions prior to the latest release Description The issue concerns an obsolete version of cargo-audit that does not support the new V3 advisory format, which will soon be unable to parse the advisory database. Recommendations...

acheron (0.1.0), actix_web_metrics_mw (>=0.0.1, <=0.3.1) +140 more potentially affected by CVE-2020-25791 +5 more via sized-chunks (>=0.1.3, <=0.5.3)

sized-chunks CARGO version =0.1.3, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.10.0, =0.10.0, =0.1.1, =0.33.0, =0.45.1 - cargo-authors 0.5.0 and more Source cves: CVE-2020-25791, CVE-2020-25792, CVE-2020-25793, CVE-2020-25794, CVE-2020-25795, CVE-2020-25796 Source advisor...

xxlib (>=0.1.0, <=0.4.0) potentially affected by CVE-2020-35890 +1 more via ordnung (0.0.1)

ordnung CARGO version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ordnung and may be impacted: - xxlib =0.1.0, =0.4.0 Source cves: CVE-2020-35890, CVE-2020-35891 Source advisory: OSV:RUSTSEC-2020-0038...

kay (>=0.1.0, <=0.5.1) potentially affected by CVE-2020-36433 via chunky (>=0.1.4, <=0.3.7)

chunky CARGO version =0.1.4, =0.1.0, =0.5.1 Source cves: CVE-2020-36433 Source advisory: OSV:RUSTSEC-2020-0035...

SUSE SLED15 / SLES15 Security Update : rust, rust-cbindgen (SUSE-SU-2020:2041-1)

"This update for rust, rust-cbindgen fixes the following issues : rust was updated for use by Firefox 76ESR. Fixed miscompilations with rustc 1.43 that lead to LTO failures bsc1173202 Update to version 1.43.1 Updated openssl-src to 1.1.1g for CVE-2020-1967. Fixed the stabilization of AVX-512...

sentralcargo.co.id Cross Site Scripting vulnerability OBB-1220066

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

openSUSE: Security Advisory for rust, (openSUSE-SU-2020:0945-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for rust, (openSUSE-SU-2020:0933-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for rust, rust-cbindgen (moderate)

openSUSE Security Update: Security update for rust, rust-cbindgen Announcement ID: openSUSE-SU-2020:0933-1 Rating: moderate References: 1115645 1154817 1173202 Cross-References: CVE-2020-1967 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has two fixes is now...

Exploit for Out-of-bounds Write in Microsoft

CVE-2020-1054 CVE-2020-1054 LPE for Windows 7x64 !image 1d...

bevy-contrib-inspector (>=0.1.0, <=0.2.0), catenis_api_client (>=1.0.0, <=3.0.1) +21 more potentially affected by CVE-2020-35884 via tiny_http (0.7.0)

tinyhttp CARGO version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on tinyhttp and may be impacted: - bevy-contrib-inspector =0.1.0, =1.0.0, =0.16.0, =0.1.0, =0.9.0, =0.1.0, =0.1.0-alpha.0, =0.1.0, =0.6.2, =1.1.0, =0.1.1, =0.1.3 and more Source...

Logic flaws exist in the network freight service platform of Jiangsu Material Run Shiplink Network Co.

Ltd.'s network freight service platform can meet the business needs of new carriers and provide personalized functions such as QR code for private cargo sources. There is a logic flaw vulnerability in the network freight service platform of Jiangsu Material Runnings Shipping Union Network Co., Lt...

acari-lib (>=0.1.1, <=0.1.8), accepted (>=0.2.0, <=0.3.2) +1861 more potentially affected by CVE-2020-35881 via traitobject (>=0.0.1, <=0.1.1)

traitobject CARGO version =0.0.1, =0.1.1, =0.2.0, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.4.2 - aigcapi 5.1.2 - aigcchain 5.1.2 - aigcconfig 5.1.2 and more Source cves: CVE-2020-35881 Source advisory: OSV:RUSTSEC-2020-0027...

a3mo_lib (>=0.1.0, <=0.1.1), aaa_csv_challenge (0.1.0) +6423 more potentially affected by CVE-2019-25010 +1 more via failure (>=0.1.0, <=0.1.8)

failure CARGO version =0.1.0, =0.1.0, =0.0.1, =0.1.0-pre.1, =0.5.0, =0.3.0, =0.3.0-alpha.1, =0.1.0, =0.2.0-alpha.2 - accept-encoding-fork 0.2.0-alpha.3 and more Source cves: CVE-2019-25010, CVE-2020-25575 Source advisory: OSV:RUSTSEC-2020-0036...

Exploit for Path Traversal in Nazgul Nostromo_Nhttpd

CVE-2019-16278 !Rusthttps://github.com/keshiba/cve-2019-16...

algorithmia (3.0.0-beta), approveapi (0.1.0) +159 more potentially affected by CVE-2020-35863 via hyper (>=0.11.27, <=0.12.19)

hyper CARGO version =0.11.27, =0.1.0, =0.2.0, =1.5.0, =0.4.2, =0.1.0, =0.1.0, =0.1.6 - ckb-analyzer 0.39.2 and more Source cves: CVE-2020-35863 Source advisory: OSV:RUSTSEC-2020-0008...

annatar (>=0.4.3, <=0.5.8), ansi2png-rs (>=0.1.0, <=0.1.1) +95 more potentially affected by unknown CVE via rulinalg (>=0.1.0, <=0.4.2)

rulinalg CARGO version =0.1.0, =0.4.3, =0.1.0, =0.2.9, =14.1.0, =0.1.5, =0.1.0, =0.1.0, =0.4.0, =1.0.0, =0.3.2, =0.3.3 - dali 0.3.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0147...

Takeover v0.2 - Sub-Domain TakeOver Vulnerability Scanner

Sub-domain takeover vulnerability occur when a sub-domain subdomain.example.com is pointing to a service e.g: GitHub , AWS/S3 ,.. that has been removed or deleted. This allows an attacker to set up a page on the service that was being used and point their page to that sub-domain. For example, if...

acme-redirect (>=0.1.0, <=0.4.0), actix (>=0.8.0-alpha.2, <=0.9.0) +324 more potentially affected by CVE-2020-35902 via actix-codec (>=0.1.2, <=0.2.0)

actix-codec CARGO version =0.1.2, =0.1.0, =0.8.0-alpha.2, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0-alpha.1, =0.2.2 and more Source cves: CVE-2020-35902 Source advisory: OSV:RUSTSEC-2020-0049...