PT-2020-17649

Name of the Vulnerable Software and Affected Versions cgc crate through 2020-12-10 for Rust Description The issue concerns the cgc crate for Rust, where Ptr implements Send and Sync for all types, potentially leading to data races by sending non-thread safe types across threads. Additionally,...

PT-2020-17647

Name of the Vulnerable Software and Affected Versions cgc crate versions through 2020-12-10 Description The issue concerns the Ptr implementation in the cgc crate, which implements Send and Sync for all types. This can lead to data races by sending non-thread safe types across threads...

PT-2020-17648

Name of the Vulnerable Software and Affected Versions cgc crate through 2020-12-10 for Rust Description The issue concerns the cgc crate for Rust, where Ptr implements Send and Sync for all types, potentially leading to data races by sending non-thread safe types across threads. Additionally,...

CVE-2020-27830

A vulnerability was found in Linux Kernel where in the spkttyioreceivebuf2 function, it would dereference spkttyiosynth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash...

PT-2020-22169

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions zend is inconsistent, zend hash find, an...

PT-2020-17548

Name of the Vulnerable Software and Affected Versions image crate versions prior to 0.23.12 Description The issue arises from constructing a mutable reference to a struct by dereferencing a pointer obtained from slice::as ptr, which performs an implicit reborrow as an immutable shared reference a...

Prototype Pollution

json-ptr is vulnerable to prototype pollution. An attacker is able to inject arbitrary properties into existing construct prototypes...

CVE-2020-7766

This affects all versions of package json-ptr. The issue occurs in the set operation https://flitbit.github.io/json-ptr/classes/srcpointer.jsonpointer.htmlset when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the...

CVE-2020-7766

This affects all versions of package json-ptr. The issue occurs in the set operation https://flitbit.github.io/json-ptr/classes/srcpointer.jsonpointer.htmlset when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the...

Code injection

This affects all versions of package json-ptr. The issue occurs in the set operation https://flitbit.github.io/json-ptr/classes/srcpointer.jsonpointer.htmlset when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the...

CVE-2020-7766

The CVE-2020-7766 issue affects the json-ptr package and is triggered in the set operation when the force flag is true. The vulnerable path recursively sets properties on the target object but does not adequately validate the key, enabling prototype pollution. Affected versions are before 3.0.0, ...

CVE-2020-7766

This affects all versions of package json-ptr. The issue occurs in the set operation https://flitbit.github.io/json-ptr/classes/srcpointer.jsonpointer.htmlset when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the...

CVE-2020-7766 Prototype Pollution

This affects all versions of package json-ptr. The issue occurs in the set operation https://flitbit.github.io/json-ptr/classes/srcpointer.jsonpointer.htmlset when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2020-7766: Improperly Controlled Modification of Object Prototype Attributes

This affects all versions of package json-ptr. The issue occurs in the set operation https://flitbit.github.io/json-ptr/classes/srcpointer.jsonpointer.htmlset when the force flag is set to true. The function recursively set the property in the target object, however it does not properly check the...

PT-2020-19778 · Json Ptr · Json-Ptr

Name of the Vulnerable Software and Affected Versions: json-ptr versions prior to 2.1.0 Description: The issue occurs in the set operation when the force flag is set to true. The function recursively sets the property in the target object, however it does not properly check the key being set,...

Low: libwmf

Issue Overview: No CVE associated with this advisory Affected Packages: libwmf Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum update libwmf or yum update...

PT-2020-21961

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state involves several functions: zend gc delref, i zval ptr dtor, and zval ptr...

PT-2020-21948

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as zend gc delref, i zval ptr dtor, and zend unclean zval...

PT-2020-21941

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ, with a crash state involving several functions: zend gc delref, zval delref p, and zval ptr dtor nogc...