Lucene search
K

3098 matches found

OSV
OSV
added 2021/03/09 8:15 p.m.1 views

ALPINE-CVE-2021-21300

Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive...

7.5CVSS6.9AI score0.61881EPSS
Exploits5References1
Node.js
Node.js
added 2021/03/09 5:35 p.m.24 views

Prototype Pollution

Overview In mquery before version 3.2.3 there is a prototype pollution vulnerability because a special property e.g., proto can be copied during a merge or clone operation. Recommendation Upgrade to version 3.2.3 or later References - CVE - GitHub Advisory...

5CVSS5.5AI score0.00259EPSS
Exploits0Affected Software1
OSV
OSV
added 2021/03/05 9:15 a.m.2 views

CVE-2021-28034

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a double free can occur upon a val.clone panic...

9.8CVSS7.3AI score0.00433EPSS
Exploits0References1
OSV
OSV
added 2021/03/05 9:15 a.m.1 views

CVE-2021-28035

An issue was discovered in the stackdst crate before 0.6.1 for Rust. Because of the pushinner behavior, a drop of uninitialized memory can occur upon a val.clone panic...

9.8CVSS7.3AI score0.00433EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/03/05 12:0 a.m.2 views

Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in stackdst crate before 0.6.1 for Rust, which stems from the pushinner behavior, with double free at val.clone.No detailed vulnerability details are provided at...

9.8CVSS5.5AI score0.00433EPSS
Exploits0References1
NVD
NVD
added 2021/03/04 7:15 a.m.10 views

CVE-2019-18629

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a...

8.1CVSS0.00451EPSS
Exploits0References2
OSV
OSV
added 2021/03/04 7:15 a.m.1 views

CVE-2019-18629

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a...

8.1CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2021/03/04 7:15 a.m.16 views

Design/Logic Flaw

Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a...

6.8CVSS8.1AI score0.00451EPSS
Exploits0References2Affected Software10
CNVD
CNVD
added 2021/02/24 12:0 a.m.7 views

Rust Resource Management Error Vulnerability (CNVD-2021-13651)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in versions of Rust prior to 0.3.1 that stems from insertsliceclone generating two drop actions when a Clone exception occurs. No details of the vulnerability are...

5.3CVSS6.5AI score0.00377EPSS
Exploits1References1
RustSec
RustSec
added 2021/02/17 12:0 p.m.27 views

misc::vec_with_size() can drop uninitialized memory if clone panics

misc::vecwithsize creates a vector of the provided size and immediately calls vec.setlensize on it, initially filling it with uninitialized memory. It then inserts elements using veci = value.clone. If the value.clone call panics, uninitialized items in the vector will be dropped leading to...

9.8CVSS2.5AI score0.00518EPSS
Exploits1
NVD
NVD
added 2021/02/09 11:15 p.m.8 views

CVE-2021-26954

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5.3CVSS0.00377EPSS
Exploits1References1
OSV
OSV
added 2021/02/09 11:15 p.m.0 views

CVE-2021-26954

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5.3CVSS6.1AI score
Exploits0References1
Prion
Prion
added 2021/02/09 11:15 p.m.7 views

Double free

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5CVSS5.2AI score0.00377EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/02/09 10:7 p.m.10 views

CVE-2021-26954

An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insertsliceclone can perform a double drop...

5.5AI score0.00377EPSS
Exploits1References1
CVE
CVE
added 2021/02/09 10:7 p.m.60 views

CVE-2021-26954

CVE-2021-26954 affects the Rust crate qwutils prior to 0.3.1. When a Clone panic occurs, the function insert_slice_clone can perform a double drop (and potentially a double-free) due to temporary ownership duplication during insertion into a Vec. The root cause is related to how ownership is hand...

5.3CVSS5.2AI score0.00377EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2021/02/09 12:0 a.m.3 views

Rust 资源管理错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in versions of Rust prior to 0.3.1 that stems from insertsliceclone generating two drop actions when a Clone exception occurs. No details of the vulnerability are...

5.3CVSS6AI score0.00377EPSS
Exploits1References1
RustSec
RustSec
added 2021/02/03 12:0 p.m.15 views

insert_slice_clone can double drop if Clone panics.

Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element. This issue can result in an element being double-freed if the clone call panics. Commit 20cb73d...

5.3CVSS3AI score0.00377EPSS
Exploits1Affected Software1
OSV
OSV
added 2021/02/03 12:0 p.m.12 views

RUSTSEC-2021-0018 insert_slice_clone can double drop if Clone panics.

Affected versions of this crate used ptr::copy when inserting into the middle of a Vec. When ownership was temporarily duplicated during this copy, it calls the clone method of a user provided element. This issue can result in an element being double-freed if the clone call panics. Commit 20cb73d...

5.3CVSS5AI score0.00377EPSS
Exploits1References3
NVD
NVD
added 2021/01/29 7:15 a.m.12 views

CVE-2020-29604

An issue was discovered in MantisBT before 2.24.4. A missing access check in bugactiongroup.php allows an attacker with rights to create new issues to use the COPY group action to create a clone, including all bugnotes and attachments, of any private issue i.e., one having Private view status, or...

6.5CVSS6.4AI score0.00212EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/01/29 6:45 a.m.11 views

CVE-2020-29604

An issue was discovered in MantisBT before 2.24.4. A missing access check in bugactiongroup.php allows an attacker with rights to create new issues to use the COPY group action to create a clone, including all bugnotes and attachments, of any private issue i.e., one having Private view status, or...

6.8AI score0.00212EPSS
Exploits1References2
Rows per page
Query Builder