Lucene search
+L

1214 matches found

OpenVAS
OpenVAS
•added 2025/11/12 12:00 a.m.•11 views

Debian: Security Advisory (DSA-6052-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.4CVSS6.5AI score0.00167EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•0 views

CVE-2025-64170: Missing Password Field Masking

sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happens, the keystrokes that were entered a...

3.8CVSS5.8AI score0.00142EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/11/12 12:00 a.m.•15 views

Ubuntu: Security Advisory (USN-7867-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•16 views

sudo-rs 安全漏洞

sudo-rs is an open source memory security implementation of sudo and su by Trifecta Tech Foundation. A security vulnerability exists in sudo-rs version 0.2.7 through versions prior to 0.2.10, which stems from the echoing of typed characters after a password timeout, which could lead to partial...

3.8CVSS6.3AI score0.00142EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•0 views

CVE-2025-64517: Improper Authentication

sudo-rs is a memory safe implementation of sudo and su written in Rust. With Defaults targetpw or Defaults rootpw enabled, the password of the target account or root account instead of the invoking user is used for authentication. sudo-rs starting in version 0.2.5 and prior to version 0.2.10...

4.4CVSS5.7AI score0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/11/12 12:00 a.m.•12 views

sudo-rs 授权问题漏洞

sudo-rs is an open source in-memory security implementation of sudo and su by Trifecta Tech Foundation. An authorization issue vulnerability exists in sudo-rs version 0.2.5 through versions prior to 0.2.10, which stems from improperly logged authentication timestamps and could lead to bypassing...

4.4CVSS6.6AI score0.00167EPSS
SaveExploits0References2
Debian
Debian
•added 2025/11/11 7:23 p.m.•20 views

[SECURITY] [DSA 6052-1] rust-sudo-rs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6052-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 11, 2025 https://www.debian.org/security/faq -...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/11/11 12:00 a.m.•8 views

Debian dsa-6052 : librust-sudo-rs-dev - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6052 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6052-1 [email protected] https://www.debian.org/security/ Moritz...

5.6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/11/11 12:00 a.m.•15 views

Ubuntu 25.10 : sudo-rs vulnerabilities (USN-7867-1)

The remote Ubuntu 25.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7867-1 advisory. It was discovered that sudo-rs incorrectly handled passwords when timeouts occurred and the pwfeedback default was not set. This could result in a partially typed...

5.8AI score
SaveExploits0References1
OSV
OSV
•added 2025/11/11 12:00 a.m.•11 views

DSA-6052-1 rust-sudo-rs - security update

Bulletin has no description...

4.4CVSS6.5AI score0.00167EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•13 views

PT-2025-46585

Name of the Vulnerable Software and Affected Versions rust-sudo-rs affected versions not specified Description A security update is available. The package rust-sudo-rs in Debian is affected by vulnerabilities. Recommendations At the moment, there is no information about a newer version that...

4.4CVSS6.5AI score0.00167EPSS
SaveExploits0References20
vulnersOsv
vulnersOsv
•added 2025/11/06 3:47 p.m.•6 views

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2025-64173 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2025-64173 Source advisory: OSV:GHSA-X33C-7C2V-MRJ9...

7.5CVSS5.3AI score0.00318EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2025/11/06 3:45 p.m.•4 views

inigo-rs (>=0.1.1, <=0.1.4) potentially affected by CVE-2025-64347 via apollo-router (1.6.0)

apollo-router CARGO version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on apollo-router and may be impacted: - inigo-rs =0.1.1, =0.1.4 Source cves: CVE-2025-64347 Source advisory: OSV:GHSA-G8JH-VG5J-4H3F...

7.5CVSS5.3AI score0.00304EPSS
SaveExploits0
Fedora
Fedora
•added 2025/10/30 4:36 a.m.•12 views

[SECURITY] Fedora 42 Update: qt6-qtserialport-6.9.3-1.fc42

Qt Serial Port provides the basic functionality, which includes configuring, I/O operations, getting and setting the control signals of the RS-232 pinouts...

9.4CVSS7AI score0.00219EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2025/10/28 12:00 a.m.•11 views

Fedora: Security Advisory (FEDORA-2025-cf3fbd8fcf)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.8AI score0.00333EPSS
SaveExploits0References2
OSV
OSV
•added 2025/10/22 5:08 p.m.•10 views

GHSA-X77X-7MMH-CXV3 ncurses exposes uninitialized memory in string reading functions

Multiple string reading functions expose uninitialized memory by setting length to capacity when no null terminator is found. This allows reading uninitialized memory which may contain sensitive data from previous allocations. The ncurses-rs repository is archived and unmaintained...

6.9CVSS5.9AI score
SaveExploits0References3
OSV
OSV
•added 2025/10/21 12:00 p.m.•10 views

RUSTSEC-2025-0108 Uninitialized memory exposure in string reading functions

Multiple string reading functions expose uninitialized memory by setting length to capacity when no null terminator is found. This allows reading uninitialized memory which may contain sensitive data from previous allocations. The ncurses-rs repository is archived and unmaintained...

6.9AI score
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/10/20 12:00 a.m.•8 views

openSUSE Security Advisory (SUSE-SU-2025:03629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.00949EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/10/18 12:00 a.m.•9 views

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : gstreamer-plugins-rs (SUSE-SU-2025:03629-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:03629-1 advisory. Update to version 0.12.11 jscPED-13826: - CVE-2024-32650: Fixed infinite loop in...

7.5CVSS5.5AI score0.00949EPSS
SaveExploits0References4
Fedora
Fedora
•added 2025/10/09 1:15 a.m.•15 views

[SECURITY] Fedora 41 Update: rust-protobuf-codegen-3.7.2-1.fc41

Code generator for rust-protobuf. Includes a library to invoke programmatically e. g. from build.rs and protoc-gen-rs binary...

5.9CVSS7.1AI score0.0044EPSS
SaveExploits0
Rows per page
Query Builder