126 matches found
Astra Linux – Vulnerability in Firefox
Crossbeam-deque is a set of work-stealing deques for building task schedulers in Rust programming. In versions prior to 0.7.4 and 0.8.0, the race condition resulted in one or more tasks in the worker queue being popped twice, instead of other tasks that were forgotten and never popped. If tasks a...
EUVD-2026-46370
Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...
CVE-2026-64614
Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...
CVE-2026-64614 Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW
Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...
CVE-2026-64614
Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...
CVE-2026-64614: Incorrect Permission Assignment for Critical Resource
Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in deque.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644 world-readable...
EVerest security vulnerabilities
EVerest is an open-source firmware for electric vehicle charging stations developed by EVerest. Versions prior to EVerest 2026.02.0 contain security vulnerabilities; these vulnerabilities stem from data competition and could lead to queue or double-ended queue corruption...
CVE-2026-26073: Heap-based Buffer Overflow
EVerest is an EV charging software stack. Versions prior to 2026.02.0 have a data race leading to possible std::queue/std::deque corruption. The trigger is powermeter public key update and EV session/error events while OCPP not started. This results in a TSAN data race report and an ASAN/UBSAN...
MiracleLinux 8 : firefox-91.2.0-4.el8.ML.1 (AXSA:2021-2461:28)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2021-2461:28 advisory. Mozilla: Use-after-free in MessageTask CVE-2021-38496 Mozilla: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2...
EUVD-2021-1755
Malware in sbrugna...
EUVD-2021-1672
Malware in sbrugna...
EUVD-2021-1828
Malware in sbrugna...
EUVD-2021-1815
Malware in sbrugna...
EUVD-2025-29459
Malicious code in bioql PyPI...
GHSA-7MCQ-F592-PF7V Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs
The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...
aiowrap (0.1.0), ambisonic (>=0.1.0, <=0.3.1) +117 more potentially affected by unknown CVE via slice-deque (>=0.1.16, <=0.3.0)
slice-deque CARGO version =0.1.16, =0.1.0, =0.5.0, =0.1.0, =0.8.0, =0.3.0, =0.8.0, =0.4.0, =0.6.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-7MCQ-F592-PF7V...
aiowrap (0.1.0), ambisonic (>=0.1.0, <=0.3.1) +117 more potentially affected by unknown CVE via slice-deque (>=0.1.16, <=0.3.0)
slice-deque CARGO version =0.1.16, =0.1.0, =0.5.0, =0.1.0, =0.8.0, =0.3.0, =0.8.0, =0.4.0, =0.6.0, =0.1.0, =0.1.0, =0.0.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: GHSA-7MCQ-F592-PF7V...
Slice Ring Buffer and Slice Deque contains four unique double-free vulnerabilities triggered through safe APIs
The crate slice-ring-buffer was developed as a fork of slice-deque to continue maintenance and provide security patches, since the latter has been officially unmaintained RUSTSEC-2020-0158. While slice-ring-buffer has addressed some previously reported memory safety issues inherited from its fork...
