Lucene search
+L

4201 matches found

NVD
NVD
•added 2021/02/09 11:15 p.m.•47 views

CVE-2021-26954

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5.3CVSS0.01359EPSS
SaveExploits1References1
Prion
Prion
•added 2021/02/09 11:15 p.m.•26 views

Double free

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5CVSS5.2AI score0.01359EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/02/09 11:15 p.m.•13 views

CVE-2021-26954

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5.3CVSS5.6AI score0.01359EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/02/09 10:07 p.m.•49 views

CVE-2021-26954

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5.5AI score0.01359EPSS
SaveExploits1References1
CVE
CVE
•added 2021/02/09 10:07 p.m.•98 views

CVE-2021-26954

CVE-2021-26954 affects the Rust crate qwutils prior to 0.3.1. When a Clone panic occurs, the function insert_slice_clone can perform a double drop (and potentially a double-free) due to temporary ownership duplication during insertion into a Vec. The root cause is related to how ownership is hand...

5.3CVSS5.2AI score0.01359EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/02/09 10:07 p.m.•6 views

CVE-2021-26954

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

6.9CVSS0.01359EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/09 12:00 a.m.•6 views

CVE-2021-26954: Double Free

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5.3CVSS5.8AI score0.01359EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/02/09 12:00 a.m.•26 views

Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in versions of Rust prior to 0.3.1 that stems from insertsliceclone generating two drop actions when a Clone exception occurs. No details of the vulnerability are...

5.3CVSS6AI score0.01359EPSS
SaveExploits1References1
osv-rustsec
osv-rustsec
•added 2021/02/03 12:00 p.m.•61 views

RUSTSEC-2021-0018 insert_slice_clone can double drop if Clone panics.

Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element. This issue can result in an element being double-freed if the clone call panics. Commit 20cb73d...

5.3CVSS5AI score0.01359EPSS
SaveExploits1References3
RustSec
RustSec
•added 2021/02/03 12:00 p.m.•31 views

insert_slice_clone can double drop if Clone panics.

Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element. This issue can result in an element being double-freed if the clone call panics. Commit 20cb73d...

5.3CVSS3AI score0.01359EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/02/03 12:00 a.m.•6 views

PT-2021-17195

Name of the Vulnerable Software and Affected Versions: qwutils crate versions prior to 0.3.1 Description: An issue in the qwutils crate can cause a double drop when a Clone panic occurs, specifically in the insert slice clone function. This happens because affected versions of the crate use...

5.3CVSS5.6AI score0.01359EPSS
SaveExploits1References10
NVD
NVD
•added 2021/01/29 7:15 a.m.•33 views

CVE-2020-29604

An issue was discovered in MantisBT before 2.24.4. A missing access check in bugactiongroup.php allows an attacker with rights to create new issues to use the COPY group action to create a clone, including all bugnotes and attachments, of any private issue i.e., one having Private view status, or...

6.5CVSS6.4AI score0.01111EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/01/29 6:45 a.m.•40 views

CVE-2020-29604

An issue was discovered in MantisBT before 2.24.4. A missing access check in bugactiongroup.php allows an attacker with rights to create new issues to use the COPY group action to create a clone, including all bugnotes and attachments, of any private issue i.e., one having Private view status, or...

6.8AI score0.01111EPSS
SaveExploits1References2
Kitploit
Kitploit
•added 2021/01/27 8:30 p.m.•53 views

SharpEDRChecker - Checks Running Processes, Process Metadata, DLLs Loaded Into Your Current Process And The Each DLLs Metadata, Common Inst all Directories, Installed Services And Each Service Binaries Metadata, Installed Drivers And Each Drivers Metadata, All For The Presence Of Known Defensive Products Such As AV's, EDR's And Logging Tools

New and improved C Implementation of Invoke-EDRChecker. Checks running processes, process metadata, Dlls loaded into your current process and each DLLs metadata, common install directories, installed services and each service binaries metadata, installed drivers and each drivers metadata, all for...

7.1AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/01/18 12:00 a.m.•3 views

PT-2021-3960

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up versions 1.6-4.6.1 and prior versions SUSE Linux Enterprise Server 15 SP1 clone-master-clean-up versions 1.6-3.9.1 and prior versions openSUSE Factory clone-master-clean-up versions...

7.1CVSS5.9AI score0.00296EPSS
SaveExploits1References14
The Hacker News
The Hacker News
•added 2021/01/08 4:56 p.m.•22 views

New Attack Could Let Hackers Clone Your Google Titan 2FA Security Keys

Hardware security keys—such as those from Google and Yubico—are considered the most secure means to protect accounts from phishing and takeover attacks. But a new research published on Thursday demonstrates how an adversary in possession of such a two-factor authentication 2FA device can clone it...

4.2CVSS6.1AI score0.002EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/01/07 3:07 p.m.•56 views

CVE-2021-3011

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access and consequently produce a...

4.8AI score0.002EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/01/06 12:00 a.m.•91 views

Mozilla Rust rocket crate competitive conditions issue vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A contention condition issue vulnerability exists in rocket crate in versions of Mozilla Rust prior to 0.4.5, which stems from LocalRequest::clone creating multiple mutable references to the same object, which c...

8.1CVSS6.5AI score0.00969EPSS
SaveExploits1References1
osv-rustsec
osv-rustsec
•added 2020/12/31 12:00 p.m.•30 views

RUSTSEC-2020-0132 `FixedCapacityDequeLike::clone()` can cause dropping uninitialized memory

Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided T::clone panics in FixedCapacityDequeLike::clone. This causes memory corruption...

9.8CVSS9.5AI score0.01119EPSS
SaveExploits0References3
RustSec
RustSec
•added 2020/12/31 12:00 p.m.•26 views

`FixedCapacityDequeLike::clone()` can cause dropping uninitialized memory

Affected versions of this crate don't guard against panics, so that partially uninitialized buffer is dropped when user-provided T::clone panics in FixedCapacityDequeLike::clone. This causes memory corruption...

9.8CVSS5.5AI score0.01119EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder