Lucene search
K

1250 matches found

CNVD
CNVD
added 2021/02/01 12:0 a.m.7 views

Unspecified Vulnerability in Rust (CNVD-2021-13699)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust lazy-init crate through 2021-01-17, which stems from a lack of send bindings in Lazy, leading to data contention. No details of the vulnerability are provided at this time...

5.3CVSS6.6AI score0.00305EPSS
Exploits0References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.4 views

Unspecified Vulnerability in Rust (CNVD-2021-17270)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.9.2. The vulnerability stems from an issue found in the program basicdspmatrix, which can perform two delete operations. No details of the vulnerabilit...

7.5CVSS6.7AI score0.00334EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.6 views

Unspecified Vulnerability in Rust (CNVD-2021-13695)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.1.1. The vulnerability stems from a lack of program soundness and may read uninitialized memory. No details of the vulnerability are provided at this...

9.1CVSS6.6AI score0.00433EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.7 views

Unspecified Vulnerability in Rust (CNVD-2021-13697)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust. The vulnerability stems from the dereference of a program's raw pointer. No details of the vulnerability are available at this time...

7.5CVSS6.7AI score0.0039EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.6 views

Unspecified Vulnerability in Rust (CNVD-2021-13694)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust prior to 0.9.11, which stems from double line deletion by a util::mutate,mutate2 when panic occurs. No details of the vulnerability are provided at this time...

9.8CVSS6.6AI score0.00433EPSS
Exploits1References1
CNVD
CNVD
added 2021/01/29 12:0 a.m.7 views

Rust Memory Corruption Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust has a memory corruption vulnerability in versions prior to 0.2.3. The vulnerability stems from the program's implied randomness to arrays, so that uninitialized memory may be discarded in the event of an...

7.8CVSS6.8AI score0.00065EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2021/01/26 6:16 p.m.39 views

CVE-2021-3115

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo for example, cgo can execute a gcc program from an untrusted download...

7.5CVSS7.8AI score0.00137EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2021/01/26 2:14 a.m.44 views

CVE-2021-3115

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo for example, cgo can execute a gcc program from an untrusted download...

7.5CVSS8.3AI score0.00137EPSS
Exploits0
Fedora
Fedora
added 2021/01/23 1:32 a.m.82 views

[SECURITY] Fedora 33 Update: python3.9-3.9.1-2.fc33

Python 3.9 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

9.8CVSS2.1AI score0.00072EPSS
Exploits1
OSV
OSV
added 2021/01/20 4:15 p.m.1 views

CVE-2020-35272

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

4.8CVSS5.8AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/01/14 1:40 p.m.3 views

golang: malicious symbol names can lead to code execution at build time

An input validation vulnerability was found in Go. From a generated go file from the cgo tool, it is possible to modify symbols within that object file and specify code. This flaw allows an attacker to create a repository that includes malicious pre-built object files that could execute arbitrary...

7.5CVSS7.6AI score0.00167EPSS
Exploits0References5
NVD
NVD
added 2021/01/12 4:15 a.m.13 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS9.7AI score0.00778EPSS
Exploits1References3
OSV
OSV
added 2021/01/12 4:15 a.m.4 views

DEBIAN-CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

9.8CVSS8.5AI score0.00778EPSS
Exploits1References1
OSV
OSV
added 2021/01/12 4:15 a.m.5 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

9.8CVSS6.9AI score
Exploits0References3
UbuntuCve
UbuntuCve
added 2021/01/12 4:15 a.m.354 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS7.2AI score0.00778EPSS
Exploits1References3
Prion
Prion
added 2021/01/12 4:15 a.m.20 views

Path traversal

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS9.6AI score0.00778EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2021/01/12 12:0 a.m.20 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

9.7AI score0.00778EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2021/01/12 12:0 a.m.25 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS9.8AI score0.00778EPSS
Exploits1
CNVD
CNVD
added 2021/01/06 12:0 a.m.7 views

Rust buffer overflow vulnerability (CNVD-2021-37531)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in Rust serdecbor crate versions prior to 0.10.2, which stems from the fact that the CBOR deserializer may cause stack consumption via nested semantic tags. No detailed...

7.5CVSS6.9AI score0.00328EPSS
Exploits1References1
CNVD
CNVD
added 2021/01/06 12:0 a.m.8 views

Unspecified Vulnerability in Rust (CNVD-2021-39557)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust futures-intrusive crate versions prior to 0.4.0 that stems from GenericMutexGuard allowing unsynchronized types of cross-thread data contention. No details of the...

5.5CVSS6.6AI score0.00054EPSS
Exploits1References1
Rows per page
Query Builder