Design/Logic Flaw

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag in the manifest is False...

CVE-2021-43388

Unisys Cargo Mobile Application before 1.2.29 uses cleartext to store sensitive information, which might be revealed in a backup. The issue is addressed by ensuring that the allowBackup flag in the manifest is False...

CVE-2021-43388

CVE-2021-43388 affects the Unisys Cargo Mobile App prior to version 1.2.29. The vulnerability stems from storing sensitive information in cleartext, which could be exposed if backups are accessed. The cited fix is to set the manifest’s allowBackup flag to False to prevent backup of sensitive data...

Unisys Cargo Mobile 安全漏洞

Unisys Cargo Mobile is a shipping solution from Unisys, Inc. An information disclosure vulnerability exists in the Unisys Cargo Mobile Application prior to 1.2.29. The vulnerability stems from the use of plaintext storage of sensitive information, which could be exploited by an attacker to obtain...

rust-toolset:ol8 security update

rust 1.54.0-3 - Lint against Unicode control codepoints. rust-toolset 1.54.0-1 - Update to Rust and Cargo 1.54.0. 1.53.0-1 - Update to Rust and Cargo 1.53.0...

Moderate: Red Hat Security Advisory: rust-toolset-1.54-rust security update

An update for rust-toolset-1.54-rust is now available for Red Hat Developer Tools. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

rust-toolset:ol8 security, bug fix, and enhancement update

rust-toolset 1.54.0-1 - Update to Rust and Cargo 1.54.0. 1.53.0-1 - Update to Rust and Cargo 1.53.0. rust 1.54.0-2 - Make std-static-wasm arch-specific to avoid s390x. 1.54.0-1 - Update to 1.54.0. 1.53.0-2 - Use llvm-ranlib to fix wasm archives. 1.53.0-1 - Update to 1.53.0. 1.52.1-2 - Set...

Moderate: Red Hat Security Advisory: rust-toolset:rhel8 security, bug fix, and enhancement update

An update for the rust-toolset:rhel8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

rust-toolset:rhel8 security, bug fix, and enhancement update

An update is available for rust-toolset, rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust Toolset provides the Rust programming language compiler rustc...

tough-kms (>=0.2.0 <=0.3.3), tough-ssm (>=0.5.0 <=0.6.3) +1 more potentially affected by CVE-2021-41150 via tough (>=0.10.0 <=0.11.3)

tough CARGO version =0.10.0, =0.2.0, =0.5.0, =0.6.0, =0.6.4 Source cves: CVE-2021-41150 Source advisory: OSV:GHSA-R56Q-VV3C-6G9C...

async_docker (>=0.1.0 <=0.1.1), cargo (>=0.4.0 <=0.8.0) +11 more potentially affected by CVE-2021-38511 via tar (>=0.2.14 <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole =0.1.0 Source cves: CVE-2021-38511 Source advisory: OSV:GHSA-62JX-8VMH-4MCW...

actyx_sdk (=0.3.0), actyxos_sdk (>=0.5.1 <=0.6.0) +40 more potentially affected by CVE-2020-36471 via generator (=0.6.25)

generator CARGO version =0.6.25 is affected by a known vulnerability. The following packages have a transitive dependency on generator and may be impacted: - actyxsdk =0.3.0 - actyxossdk =0.5.1, =0.1.0, =0.2.0, =0.1.0, =0.1.0-alpha.1, =0.1.0, =0.0.1, =0.2.11, =0.7.0, =0.5.0, =0.9.2, =0.8.2, =0.1....

artillery-core (>=0.1.2 <=0.1.2-alpha.3), bastion (>=0.3.5 <=0.4.5) +502 more potentially affected by CVE-2021-38195 via libsecp256k1 (>=0.1.3 <=0.3.5)

libsecp256k1 CARGO version =0.1.3, =0.1.2, =0.3.5, =0.1.0, =0.1.1, =0.7.0, =0.1.0, =0.2.0, =1.0.0, =0.7.0, =0.8.2 and more Source cves: CVE-2021-38195 Source advisory: OSV:GHSA-G4VJ-X7V9-H82M...

aoa (=0.1.0), blinkrs (=1.0.1) +30 more potentially affected by CVE-2020-36206 via rusb (>=0.4.0 <=0.6.5)

rusb CARGO version =0.4.0, =0.2.0, =0.6.0, =0.2.0, =0.1.0, =1.0.0-alpha.2, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.1.0, =0.2.3 and more Source cves: CVE-2020-36206 Source advisory: OSV:GHSA-9MXW-4856-9CM5...

adi (>=0.4.0 <=0.6.0), adi_screen (>=0.3.0 <=0.7.0) +167 more potentially affected by CVE-2020-35923 via ordered-float (>=0.2.3 <=1.0.2)

ordered-float CARGO version =0.2.3, =0.4.0, =0.3.0, =0.7.5, =0.6.0, =0.1.0, =0.1.0, =0.1.1, =0.2.0, =3.1.3, =0.1.1, =0.9.0, =0.23.0 and more Source cves: CVE-2020-35923 Source advisory: OSV:GHSA-566X-HHRF-QF8M...

HiddenBytes (=0.1.0), Rust-wasm (=0.1.0) +726 more potentially affected by CVE-2020-35916 via image (>=0.10.4 <=0.23.10)

image CARGO version =0.10.4, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =0.3.0 and more Source cves: CVE-2020-35916 Source advisory: OSV:GHSA-9WGH-VJJ7-7433...

acheron (=0.1.0), actix_web_metrics_mw (>=0.0.1 <=0.3.1) +142 more potentially affected by CVE-2020-25791 +5 more via sized-chunks (>=0.1.3 <=0.5.3)

sized-chunks CARGO version =0.1.3, =0.0.1, =0.11.0, =0.11.0, =0.2.0, =0.6.0, =0.4.0, =0.2.0, =1.6.0, =0.10.0, =0.10.0, =0.1.1, =0.33.0, =0.45.1 - cargo-authors =0.5.0 and more Source cves: CVE-2020-25791, CVE-2020-25792, CVE-2020-25793, CVE-2020-25794, CVE-2020-25795, CVE-2020-25796 Source...

async_docker (>=0.1.0 <=0.1.1), cargo (>=0.4.0 <=0.8.0) +11 more potentially affected by CVE-2018-20990 via tar (>=0.2.14 <=0.3.4)

tar CARGO version =0.2.14, =0.1.0, =0.4.0, =0.3.1, =0.1.0, =0.3.0, =0.2.0, =0.2.0, =0.2.1, =0.0.1, =0.0.9 - wormhole =0.1.0 Source cves: CVE-2018-20990 Source advisory: OSV:GHSA-2367-C296-3MP2...

acari-lib (>=0.1.1 <=0.1.8), acick (>=0.0.6 <=0.2.0-alpha.0) +1255 more potentially affected by CVE-2017-18587 via hyper (>=0.10.13 <=0.10.16)

hyper CARGO version =0.10.13, =0.1.1, =0.0.6, =0.0.7-alpha.3, =0.0.7-alpha.1, =0.1.0, =0.4.1, =0.1.0, =0.2.0, =0.0.1, =0.3.2, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2017-18587 Source advisory: OSV:GHSA-Q89X-F52W-6HJ2...

Moderate: rust-toolset:rhel8 security, bug fix, and enhancement update

Rust Toolset provides the Rust programming language compiler rustc, the cargo build tool and dependency manager, and required libraries. The following packages have been upgraded to a later upstream version: rust 1.52.1. BZ1953002 Security Fixes: rust: optimization for joining strings can cause...