CVE-2019-16137

CVE-2019-16137 affects the spin crate for Rust (before version 0.5.2) where the RwLock memory ordering is mishandled. The underlying issue can allow two writers to acquire the lock simultaneously, violating mutual exclusion. This is documented across multiple sources (NVD, Red Hat, SUSE, OSV, Git...

CVE-2019-16137: Improper Synchronization

An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...

alloc-cortex-m (>=0.3.0, <=0.3.2), alloc-fmt (>=0.1.0, <=0.2.0) +87 more potentially affected by CVE-2019-16137 via spin (>=0.3.5, <=0.4.10)

spin CARGO version =0.3.5, =0.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.2, =0.1.3, =0.0.1, =0.2.0, =0.2.1, =0.1.0, =0.2.2 and more Source cves: CVE-2019-16137 Source advisory: OSV:RUSTSEC-2019-0013...

RUSTSEC-2019-0013 Wrong memory orderings in RwLock potentially violates mutual exclusion

Wrong memory orderings inside the RwLock implementation allow for two writers to acquire the lock at the same time. The drop implementation used Ordering::Relaxed, which allows the compiler or CPU to reorder a mutable access on the locked data after the lock has been yielded. Only users of the...

anime-spin.net XSS vulnerability

Open Bug Bounty ID: OBB-484422 Description| Value ---|--- Affected Website:| anime-spin.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure base...

CVE-2015-3229

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2015-3229

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2015-3229

CVE-2015-3229 affects fedora-cloud-atomic.ks within spin-kickstarts. The vulnerability arises from downloading Fedora Atomic updates over HTTP, which enables remote attackers to perform man-in-the-middle attacks. Impact is exposure of update integrity/authenticity, potentially allowing tampered u...

CVE-2015-3229: Undefined Security Weakness

fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates...

CVE-2017-8071: Improper Resource Shutdown or Release

drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID request callback, which allows local users to cause a denial of service deadlock via unspecified vectors...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2.5. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

World Spin - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application World Spin published at the 'play' market has multiple vulnerabilities...

Snow Spin: Snowboard Adventure - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Snow Spin: Snowboard Adventure published at the 'play' market has multiple vulnerabilities...

Glow Spin Art - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Glow Spin Art published at the 'play' market has multiple vulnerabilities...

Ainsworth King Spin Slots - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Ainsworth King Spin Slots published at the 'play' market has multiple vulnerabilities...

Spin To Win Slots - Dangerous filesystem permissions, MIT license, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Spin To Win Slots published at the 'play' market has multiple vulnerabilities...

Spin-Tops - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Spin-Tops published at the 'play' market has multiple vulnerabilities...

Debian DSA-3433-1 : samba - security update

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2015-3223 Thilo Uttendorfer of Linux Information Systems AG discovered that a malicious request can...

Information disclosure

The SPIN - Motion Comic aka me.narr8.android.serial.spin application 2.1.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7374

The CVE-2014-7374 entry involves the SPIN - Motion Comic (aka me.narr8.android.serial.spin) Android app, version 2.1.7, which fails to verify X.509 certificates from SSL servers. This behavior allows man-in-the-middle attackers to spoof servers and potentially obtain sensitive information via a c...