EUVD-2022-0583

Malicious code in bioql PyPI...

EUVD-2022-0549

Malicious code in bioql PyPI...

EUVD-2022-2648

Malicious code in bioql PyPI...

EUVD-2022-0542

Malicious code in bioql PyPI...

EUVD-2022-0669

Malicious code in bioql PyPI...

EUVD-2022-3538

Malicious code in bioql PyPI...

EUVD-2022-0458

Malicious code in bioql PyPI...

EUVD-2022-0632

Malicious code in bioql PyPI...

EUVD-2023-59768

Malicious code in bioql PyPI...

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust version 1.87.0 through versions prior to 1.89.0, which stems from improper handling of path separators and could lead to a path traversal attack or malicious file system...

Linux Distros Unpatched Vulnerability : CVE-2023-53159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::sethost. CVE-2023-53159 Note that Nessus relie...

CVE-2024-58266 affecting package rust for versions less than 1.86.0-3

CVE-2024-58266 affecting package rust for versions less than 1.86.0-3. A patched version of the package is available...

Amazon Linux 2 : rust (ALAS-2025-2933)

The version of rust installed on the remote host is prior to 1.86.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2933 advisory. The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::codedinputstream::CodedInputStream::skipgroup...

SUSE CVE-2023-53161

The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic...

SUSE CVE-2024-58261

The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsupported primary key type...

CVE-2023-53159

The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::sethost...

CVE-2023-53161

The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic...

GHSA-624C-2H52-GF7F Duplicate Advisory: Remotely exploitable denial of service in Rosenpass

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6ggr-cwv4-g7qg. This link is maintained to preserve external references. Original Description The rosenpass crate before 0.2.1 for Rust allows remote attackers to cause a denial of service panic via a one-byte U...

CVE-2023-53159

The CVE-2023-53159 issue affects the rust-openssl crate prior to 0.10.55. It describes an out-of-bounds read caused by an empty string being passed to X509VerifyParamRef::set_host. The entry's CVSS data indicates a high-severity impact (CRITICAL) with network attack vector and high confidentialit...

CVE-2023-53161

CVE-2023-53161 affects the Rust buffered-reader crate prior to version 1.1.5. The root cause described in the connected sources is an out-of-bounds array access that can cause a panic. The vulnerability is limited to the library level (buffered-reader) and is described as allowing an out-of-bound...