Lucene search
+L

3414 matches found

BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.11 views

The vulnerability of the clone-master-clean-up.sh utility in the SUSE Linux Enterprise Server operating system allows a hacker to delete any files they desire.

The vulnerability of the clone-master-clean-up.sh utility in the SUSE Linux Enterprise Server operating system is related to errors in link handling. Exploiting this vulnerability could allow a malicious actor to delete any files remotely...

4.8CVSS7AI score0.00296EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2021/09/09 12:0 a.m.8 views

Fedora: Security Advisory for partclone (FEDORA-2021-4dd269a76c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
added 2021/09/07 4:26 p.m.19 views

[SECURITY] Fedora 33 Update: partclone-0.3.17-4.fc33

Partclone provides utilities to clone and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition...

7.2AI score
SaveExploits0
Fedora
Fedora
added 2021/09/04 7:32 p.m.34 views

[SECURITY] Fedora 34 Update: partclone-0.3.17-4.fc34

Partclone provides utilities to clone and restore used blocks on a partition and is designed for higher compatibility of the file system by using existing libraries, e.g. e2fslibs is used to read and write the ext2 partition...

7.2AI score
SaveExploits0
Github Security Blog
Github Security Blog
added 2021/08/25 8:56 p.m.31 views

Use after free in heapless

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

7.5CVSS7.3AI score0.01233EPSS
SaveExploits1References4Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/25 8:48 p.m.38 views

Data races in rocket

The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time...

8.1CVSS7.7AI score0.00957EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/08/25 8:48 p.m.65 views

GHSA-8Q2V-67V7-6VC6 Data races in rocket

The affected version of rocket contains a Clone trait implementation of LocalRequest that reuses the pointer to inner Request object. This causes data race in rare combinations of APIs if the original and the cloned objects are modified at the same time...

8.1CVSS7.9AI score0.00957EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:44 p.m.38 views

Use after free in string-interner

Affected versions of this crate did not clone contained strings when an interner is cloned. Interners have raw pointers to the contained strings, and they keep pointing the strings which the old interner owns, after the interner is cloned. If a new cloned interner is alive and the old original...

7.5CVSS7.1AI score0.01547EPSS
SaveExploits1References6Affected Software1
Huntr
Huntr
added 2021/08/24 8:52 p.m.6 views

Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat

✍️ Description csrf bug to make clone of a role 🕵️‍♂️ Proof of Concept i see everywhere csrf token is checking but during cloning of role, it does not check csrf token .\ Belllow url is vulnerable to csrf attack to make a clone of role...

7AI score
SaveExploits0
OSV
OSV
added 2021/08/08 6:15 a.m.18 views

CVE-2020-36464

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

7.5CVSS6.8AI score
SaveExploits0References2
NVD
NVD
added 2021/08/08 6:15 a.m.25 views

CVE-2020-36464

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

7.5CVSS0.01233EPSS
SaveExploits1References2
OSV
OSV
added 2021/08/08 6:15 a.m.8 views

CVE-2020-36452

An issue was discovered in the array-tools crate before 0.3.2 for Rust. FixedCapacityDequeLike::clone has a drop of uninitialized memory...

9.8CVSS7.3AI score0.01119EPSS
SaveExploits0References2
Prion
Prion
added 2021/08/08 6:15 a.m.15 views

Design/Logic Flaw

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire underlying Vec without considering whether it has already been partially consumed...

5CVSS7.5AI score0.01233EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2021/08/08 12:0 a.m.14 views

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation.A memory corruption vulnerability exists in versions of Mozilla Rust prior to 0.3.2, which stems from Rust's array-tools crate. for fixedcapacitydequelikes:: clone has an uninitialized memory. An attacker could...

9.8CVSS5.7AI score0.01119EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/08/05 12:0 a.m.7 views

PT-2022-7022

Name of the Vulnerable Software and Affected Versions Git versions prior to 2.30.6 Git versions prior to 2.31.5 Git versions prior to 2.32.4 Git versions prior to 2.33.5 Git versions prior to 2.34.5 Git versions prior to 2.35.5 Git versions prior to 2.36.3 Git versions prior to 2.37.4 Description...

5.5CVSS6.2AI score0.01278EPSS
SaveExploits1References98
OSV
OSV
added 2021/08/02 9:15 p.m.9 views

CVE-2021-21865

A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this...

7.8CVSS7.3AI score0.01298EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/08/02 9:15 p.m.3 views

CVE-2021-21865

A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this...

8.8CVSS7.2AI score0.01298EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/08/02 12:0 a.m.10 views

PT-2021-7767 · 3S Smart Software Solutions · Codesys Development System

Name of the Vulnerable Software and Affected Versions: CODESYS Development System version 3.5.16 Description: A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone functionality. This vulnerability can be triggered by a specially crafted file, leadin...

8.8CVSS8.3AI score0.01298EPSS
SaveExploits0References8
GithubExploit
GithubExploit
added 2021/08/01 10:50 a.m.132 views

Exploit for Out-of-bounds Write in Sudo_Project Sudo

CVE-2019-18634 N-Day Exploit Slides https://docs.googl...

7.8CVSS7.6AI score0.19426EPSS
SaveExploits14
OPENSUSE Linux
OPENSUSE Linux
added 2021/07/29 12:0 a.m.88 views

Security update for git (moderate)

openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2021:2555-1 Rating: moderate References: 1168930 1183026 1183580 SLE-17838 SLE-18152 Cross-References: CVE-2021-21300 CVSS scores: CVE-2021-21300 NVD : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2021-21300...

7.5CVSS8.2AI score0.88644EPSS
SaveExploits5References5
Rows per page
Query Builder