1267 matches found
CVE-2023-29134
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. There is mishandling of backticks to smartSplit...
CVE-2023-29134
The CVE-2023-29134 issue affects the MediaWiki Cargo extension (versions through 1.39.3). The root cause is mishandling of backticks in smartSplit within Cargo, leading to vulnerability in the affected component. Documented impact indicates partial integrity and confidentiality concerns and a hig...
PT-2024-12205 · Mediawiki · Mediawiki Cargo Extension
Name of the Vulnerable Software and Affected Versions: MediaWiki Cargo extension versions through 1.39.3 Description: An issue was discovered in the Cargo extension for MediaWiki, where there is mishandling of backticks to smartSplit. Recommendations: For MediaWiki Cargo extension versions throug...
Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2024-574)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-574 advisory. RUSTSEC-2024-0006 NOTE: https://rustsec.org/advisories/RUSTSEC-2024-0006.html NOTE: https://github.com/comex/rust-shlex/security/advisories/GHSA-r7qv-8r2h-pg27 Tenable has extracted the preceding...
inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2024-28101 via apollo-router (1.6.0)
apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2024-28101 Source advisory: OSV:GHSA-CGQF-3CQ5-WVCJ...
BIT-MEDIAWIKI-2023-37254
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. XSS can occur in Special:CargoQuery via a crafted page item when using the default format...
BIT-MEDIAWIKI-2023-37256
An issue was discovered in the Cargo extension for MediaWiki through 1.39.3. It allows one to store javascript: URLs in URL fields, and automatically links these URLs...
BIT-MEDIAWIKI-2024-23173
An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. The Special:Drilldown page allows XSS via artist, album, and position parameters because of applied filter values in drilldown/CargoAppliedFilter.php...
aide (>=0.1.0, <=0.4.3), bpxe (>=0.1.0, <=0.1.2) +66 more potentially affected by unknown CVE via linkme (>=0.1.6, <=0.2.10)
linkme CARGO version =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.2-alpha, =0.0.2-alpha, =0.0.4-alpha and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0407...
openSUSE: Security Advisory for rust1.71 (SUSE-SU-2023:3251-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for rust, rust1.72 (SUSE-SU-2023:3722-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CentOS 9 : rust-1.71.1-1.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the rust-1.71.1-1.el9 build changelog. - Cargo downloads the Rust project's dependencies and compiles the project. Cargo prior to version 0.72.2, bundled with Rust prior to version 1.71.1,...
Fedora: Security Advisory for rust-cargo-c (FEDORA-2024-993d3a78dd)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: rust-cargo-c-0.9.28-4.fc38
Helper program to build and install c-like libraries...
[SECURITY] Fedora 39 Update: rust-cargo-c-0.9.28-4.fc39
Helper program to build and install c-like libraries...
Fedora: Security Advisory for rust-cargo-c (FEDORA-2024-8ba389815f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
abi-stable-host-api (>=0.1.1, <=0.1.13), abi_stable (>=0.2.0, <=0.11.3) +267 more potentially affected by unknown CVE via generational-arena (>=0.1.0, <=0.2.9)
generational-arena CARGO version =0.1.0, =0.1.1, =0.2.0, =0.4.0, =0.4.0, =0.5.0, =0.1.14, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.10.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0014...
The vulnerability of the Cargo.toml file in the git-based software platform, which facilitates collaborative code development on GitLab, allows a hacker to trigger a service failure.
The vulnerability of the Cargo.toml file in the git-based software development platform for collaborative code management on GitLab is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker, operating remotely, t...
etclient (0.3.0), evm-network (>=0.11.0-beta.0, <=0.11.0) +10 more potentially affected by CVE-2021-29511 via evm (>=0.7.1, <=0.17.3)
evm CARGO version =0.7.1, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.11.0-beta.0, =0.7.0, =2.0.0-alpha.3, =2.0.1 Source cves: CVE-2021-29511 Source advisory: OSV:GHSA-4JWQ-572W-4388...
chimper (>=0.3.0, <=0.4.0), conrod_example_shared (>=0.62.0, <=0.76.1) +26 more potentially affected by unknown CVE via conrod_core (>=0.62.0, <=0.76.1)
conrodcore CARGO version =0.62.0, =0.3.0, =0.62.0, =0.0.1, =0.67.0, =0.62.0, =0.71.0, =0.1.0, =0.1.0, =0.62.0, =0.69.0, =0.62.0, =0.2.1, =0.1.0, =0.24.0, =0.1.0-docfix, =0.25.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2024-0396...