Lucene search
+L

55 matches found

OSV
OSV
•added 2021/08/08 6:15 a.m.•16 views

CVE-2020-36460

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type...

8.1CVSS5.8AI score0.01098EPSS
SaveExploits1References2
NVD
NVD
•added 2021/08/08 6:15 a.m.•46 views

CVE-2020-36460

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type...

8.1CVSS0.01098EPSS
SaveExploits1References2
CVE
CVE
•added 2021/08/08 5:13 a.m.•222 views

CVE-2020-36460

CVE-2020-36460 affects the Rust model crate: the Shared data structure implements Send and Sync regardless of the inner type, potentially enabling data races in safe Rust. Covered in multiple sources (NVD/RUSTSEC/RH Red Hat) with references to a contention issue; no explicit patch/version remedia...

8.1CVSS8AI score0.01098EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/08/08 5:13 a.m.•53 views

CVE-2020-36460

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type...

8.1AI score0.01098EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/08 12:00 a.m.•8 views

CVE-2020-36460: Access of Resource Using Incompatible Type

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation of the Send and Sync traits without regard for the inner type...

8.1CVSS5.8AI score0.01098EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/06/18 12:00 a.m.•25 views

Google Chrome post-release reuse vulnerability (CNVD-2021-45148)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Sharing in versions prior to Google Chrome 91.0.4472.114. No detailed vulnerability details are provided at this time...

8.8CVSS7.6AI score0.0135EPSS
SaveExploits0References1
osv-ghsa
osv-ghsa
•added 2021/06/08 10:29 p.m.•76 views

GHSA-9699-GM7F-CMJV Unsynchronized Access to Shared Data in a Multithreaded Context in RESTEasy

A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerability is to confidentiality and integrity. Versions before resteasy 2.0.0.Alpha3 are affected...

4.3CVSS4.7AI score0.00629EPSS
SaveExploits0References4
osv-rustsec
osv-rustsec
•added 2020/11/10 12:00 p.m.•49 views

RUSTSEC-2020-0140 `Shared` can cause a data race

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and...

8.1CVSS8AI score0.01098EPSS
SaveExploits1References3
Prion
Prion
•added 2019/05/10 9:29 p.m.•24 views

Information disclosure

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior a...

7.2CVSS7.4AI score0.00383EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/05/10 8:18 p.m.•39 views

CVE-2019-5675

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior a...

6.7AI score0.00383EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/05/10 12:00 a.m.•2 views

PT-2019-4575

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to errors in synchronizing shared data, such as static variables across threads, in the DxgkDdiEscape function of the NVIDIA graphics processo...

7.8CVSS0.00383EPSS
SaveExploits0References6
ThreatPost
ThreatPost
•added 2018/09/14 4:09 p.m.•21 views

Five Weakest Links in Cybersecurity That Target the Supply Chain

Matan Or-El, co-founder and CEO at Panorays Third-party breaches have become an epidemic as cybercriminals target the weakest link. Organizations such as BestBuy, Sears, Delta and even NYU Medical Center are just a few that have felt the impact of cyberattacks through third-party vendors. The...

0.3AI score
SaveExploits0References6
OSV
OSV
•added 2017/12/07 12:29 a.m.•24 views

DEBIAN-CVE-2017-17448

net/netfilter/nfnetlinkcthelper.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnlcthelperlist data structure is shared across all net namespaces...

7.8CVSS7.2AI score0.00372EPSS
SaveExploits0References1
NVD
NVD
•added 2017/12/07 12:29 a.m.•31 views

CVE-2017-17450

net/netfilter/xtosf.c in the Linux kernel through 4.14.4 does not require the CAPNETADMIN capability for addcallback and removecallback operations, which allows local users to bypass intended access restrictions because the xtosffingers data structure is shared across all net namespaces...

7.8CVSS7.4AI score0.00406EPSS
SaveExploits0References13
CNVD
CNVD
•added 2017/01/10 12:00 a.m.•16 views

EMC ScaleIO Local Denial of Service Vulnerability

EMC ScaleIO is a software-defined solution that converts existing DAS storage to shared data block storage using the user's existing hardware or EMC servers. A local denial of service vulnerability exists in EMC ScaleIO. An attacker could exploit this vulnerability to cause a denial of service...

5.5CVSS6.5AI score0.00304EPSS
SaveExploits0References1
Rows per page
Query Builder