926 matches found
Sql injection
A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...
CVE-2023-1564 SourceCodester Air Cargo Management System GET Parameter update_status.php sql injection
A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/transactions/updatestatus.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...
CVE-2023-1564
CVE-2023-1564 is a SQL injection vulnerability in SourceCodester Air Cargo Management System 1.0, located in admin/transactions/update_status.php via the GET parameter id. Root cause is unsafe handling of the id parameter, enabling remote exploitation with publicly disclosed exploit. Exploitation...
Air Cargo Management System SQL注入漏洞
Air Cargo Management System is an air cargo management system. A SQL injection vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which stems from a problem in the file admin/transactions/updatestatus.php, where manipulation of the parameter id can lead to sql injecti...
Medium: rust
Issue Overview: Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the /.cargo folder on disk, making it available to the Rust projects it builds. To reco rd when an extraction is successful, Cargo writes "ok" to the...
Amazon Linux 2023 : cargo, clippy, rust (ALAS2023-2023-109)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-109 advisory. 2024-02-15: CVE-2022-36113 was added to this advisory. 2024-02-15: CVE-2022-36114 was added to this advisory. Cargo is a package manager for the rust programming language. After a package is...
cargo-generate (>=0.15.0 <=0.16.0), cargo-temp (>=0.2.11 <=0.2.13) +30 more potentially affected by unknown CVE via git-path (>=0.1.3 <=0.4.2)
git-path CARGO version =0.1.3, =0.15.0, =0.2.11, =11.0.0, =0.1.0, =0.3.0, =0.1.0, =0.1.0, =0.29.0, =0.19.0, =0.16.0, =0.13.0, =0.17.0, =0.1.2, =0.7.0, =0.8.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0026...
cargo-generate (>=0.13.1 <=0.16.0), cargo-smart-release (>=0.1.0 <=0.2.4) +43 more potentially affected by unknown CVE via git-hash (>=0.10.3 <=0.9.11)
git-hash CARGO version =0.10.3, =0.13.1, =0.1.0, =0.2.11, =11.0.0, =0.12.11, =0.1.0, =0.1.0, =0.3.0, =0.2.0, =0.1.0, =0.1.0, =0.10.0, =0.1.0, =0.1.0, =0.4.3 - git-lock =0.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0025...
abrute (>=0.1.7 <=0.1.9), alass-cli (>=1.0.0 <=2.0.0) +159 more potentially affected by unknown CVE via ascii (>=0.7.1 <=0.8.7)
ascii CARGO version =0.7.1, =0.1.7, =1.0.0, =0.1.0, =0.1.0, =0.1.4, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.0.0, =1.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2023-0015...
Amazon Linux 2 : rust (ALAS-2023-1959)
The version of rust installed on the remote host is prior to 1.66.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1959 advisory. Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code ...
Medium: rust
Issue Overview: Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the /.cargo folder on disk, making it available to the Rust projects it builds. To reco rd when an extraction is successful, Cargo writes "ok" to the...
SUSE CVE-2019-16760
Cargo prior to Rust 1.26.0 may download the wrong dependency if your package.toml file uses the package configuration key. Usage of the package key to rename dependencies in Cargo.toml is ignored in Rust 1.25.0 and prior. When Rust 1.25.0 and prior is used Cargo may download the wrong dependency,...
SUSE CVE-2022-36114
Cargo is a package manager for the rust programming language. It was discovered that Cargo did not limit the amount of data extracted from compressed archives. An attacker could upload to an alternate registry a specially crafted package that extracts way more data than its size also known as a...
SUSE CVE-2022-36113
Cargo is a package manager for the rust programming language. After a package is downloaded, Cargo extracts its source code in the /.cargo folder on disk, making it available to the Rust projects it builds. To record when an extraction is successful, Cargo writes "ok" to the .cargo-ok file at the...
SUSE CVE-2022-46176
Cargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. An attacker could exploit this to perform man-in-the-middle MITM attacks. This vulnerability has been assigned...
The vulnerability of the Cargo package manager in the Rust programming language, which allows attackers to compromise the integrity of the protected information
The vulnerability of the Cargo package manager in the Rust programming language is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability allows a malicious actor to influence the integrity of the protected information via the SSH protocol...
[SECURITY] Fedora 36 Update: rust-cargo-c-0.9.12-3.fc36
Helper program to build and install c-like libraries...
Fedora: Security Advisory for rust-cargo-c (FEDORA-2023-3ec32f6d4e)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 37 Update: rust-cargo-c-0.9.12-3.fc37
Helper program to build and install c-like libraries...
Fedora: Security Advisory for rust-cargo-c (FEDORA-2023-e3c8abd37e)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...