3432 matches found
Rust futures-util crate security vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in futures-util crate before 0.3.2 for Rust, which stems from the fact that FuturesUnordered may result in data corruption due to improper synchronization handling...
Prototype Pollution
Overview gsap is a GSAP is a JavaScript library for building high-performance animations that work in every major browser. Animate CSS, SVG, canvas, React, Vue, WebGL, colors, strings, motion paths, generic objects...anything JavaScript can touch! The ScrollTrigger plug Affected versions of this...
GHSA-R92X-F52R-X54G regular expression denial of service (ReDoS)
date-and-time is an npm package for manipulating date and time. In date-and-time before version 0.14.2, there a regular expression involved in parsing which can be exploited to to cause a denial of service. This is fixed in version 0.14.2...
CVE-2020-20299
WeiPHP 5.0 does not properly restrict access to pages, related to using POST...
CVE-2020-35133
irfanView 4.56 contains an error processing parsing files of type .pcx. Which leads to out-of-bounds writing at iview32+0xdb60...
ALPINE-CVE-2020-29362
An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS11 function call, the receiving...
CVE-2020-17128
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2020-17129
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2020-17132
Microsoft Exchange Remote Code Execution Vulnerability...
CVE-2020-17122
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2020-17123
Microsoft Excel Remote Code Execution Vulnerability...
CVE-2020-16996
Kerberos Security Feature Bypass Vulnerability...
safe_dns (0.3.0), safe_launcher (0.1.0) +1 more potentially affected by unknown CVE via safe_core (0.3.0)
safecore CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on safecore and may be impacted: - safedns 0.3.0 - safelauncher 0.1.0 - safenfs 0.3.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0086...
CVE-2017-2910
An exploitable Out-of-bounds Write vulnerability exists in the xlsaddCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An attacker can send malicious xls file to trigger this vulnerability...
golang: data race in certain net/http servers including ReverseProxy can lead to DoS
A flaw was found Go's net/http package. Servers using ReverseProxy from net/http in the Go standard library are vulnerable to a data race that results in a denial of service. The highest threat from this vulnerability is to system availability...
Libsvm Denial of Service Vulnerability
Libsvm is a simple, easy-to-use and efficient software for SVM classification and regression. A denial of service vulnerability exists in svmpredictvalues in svm.cpp in Libsvm version 324. An attacker can exploit this vulnerability to cause a denial of service segmentation error via a specially...
CVE-2020-1599
Windows Spoofing Vulnerability...
CVE-2020-17101
HEIF Image Extensions Remote Code Execution Vulnerability...