240 matches found
CVE-2021-30457
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in removeset upon a panic in a Drop impl...
CVE-2021-30457: Double Free
An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in removeset upon a panic in a Drop impl...
CVE-2021-29929
An issue was discovered in the endiantrait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics...
CVE-2021-29929
An issue was discovered in the endiantrait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics...
Double free
An issue was discovered in the endiantrait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics...
CVE-2021-29929
An issue was discovered in the endiantrait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics...
Rust 资源管理错误漏洞
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in endiantrait crate for Rust 2021-01-04 and earlier versions, which stems from an error that can occur when a user-supplied endian impl occurs panic. No detailed...
PT-2021-28150
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include the crash type and state, which involve functions such as estrdup,...
Insecure Anti-CSRF Tokens
myfaces-impl uses an insecure cryptographic random for anti-CSRF tokens. The usage of the insecure tokens would allow an attacker to predict subsequent anti-CSRF token values and successfully perform requests on behalf of the users...
PT-2021-28091
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the AK:: format value function, specifically with the unsigned char type, and...
audir (0.1.0), com-impl (>=0.1.0, <=0.1.1) +6 more potentially affected by CVE-2021-45681 via derive-com-impl (0.1.1)
derive-com-impl CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on derive-com-impl and may be impacted: - audir 0.1.0 - com-impl =0.1.0, =0.3.0-alpha1, =0.3.0-alpha1, =0.3.0-alpha4 - dxgi 0.3.0-alpha4 - wic 0.3.0-alpha1 Source cves:...
PT-2021-24255
Name of the Vulnerable Software and Affected Versions: derive-com-impl crate versions prior to 0.1.2 Description: An issue in the derive-com-impl crate can cause an invalid reference and memory corruption because the AddRef method might not be called before returning a pointer. The QueryInterface...
panic in user-provided `Endian` impl triggers double drop of T
Affected versions of the crate does not guard against panic from user-provided impl of Endian trait, which is a safe trait that users can implement. If a user-provided implementation of the Endian trait panics, double-drop is triggered due to the duplicated ownership of T created by ptr::read...
PT-2020-22026
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a crash caused by a use-of-uninitialized-value error. The crash occurs in the following functions: gp pwrite impl, clist fwrite...
Authorization Bypass
portal-impl is vulnerable to authorization bypass. The property portlet.resource.id.banned.paths.regexp can be bypassed with doubled encoded URLs...
PT-2020-21896
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including hb realloc impl, hb vector t::alloc, and h...
`pnet_packet` buffer overrun in `set_payload` setters
As indicated by this issue, a buffer overrun is possible in the setpayload setter of the various mutable "Packet" struct setters. The offending setpayload functions were defined within the struct impl blocks in earlier versions of the package, and later by the packet macro. Fixed in the packet...
Remote Code Execution
portal-impl is vulnerable to remote code execution. The template API does not properly restrict user access to template objects, allowing an attacker to execute arbitrary code on the system using malicious FreeMarker and Velocity templates...
Unauthorized User Deletion
portal-impl is vulnerable to unauthorized user deletion. It is possible for any unregistered or registered user to delete other user from the portal if he or she is aware of the email address of the target user and manage to construct a URL for it...