CVE-2020-19363: Exposure of Sensitive Information to an Unauthorized Actor

Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories...

PT-2021-10344

Name of the Vulnerable Software and Affected Versions: Vtiger CRM version 7.2.0 Description: The issue allows an attacker to display hidden files and list directories by utilizing the /libraries and /layout directories. Recommendations: For Vtiger CRM version 7.2.0, consider restricting access to...

PT-2021-11227

Name of the Vulnerable Software and Affected Versions: OpenMage versions prior to 19.4.10 OpenMage versions prior to 20.0.6 Description: The issue allows remote code execution. An administrator with permission to update product data can store an executable file on the server and load it via layou...

VulnCheck KEV: CVE-2023-21492

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization ASLR bypass...

amethyst-console (0.1.0), amethyst-imgui (>=0.5.0, <=0.6.0) +14 more potentially affected by CVE-2021-25902 via glsl-layout (0.3.2)

glsl-layout CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on glsl-layout and may be impacted: - amethyst-console 0.1.0 - amethyst-imgui =0.5.0, =0.1.0, =0.6.0, =0.6.0, =0.6.0, =0.1.0, =0.4.0, =0.1.0, =0.6.0, =0.6.0, =0.1.0, =0.3.0,...

PT-2021-16833

Name of the Vulnerable Software and Affected Versions glsl-layout crate versions prior to 0.4.0 Description An issue was discovered in the glsl-layout crate where a panic occurring within the user-provided function f 2nd parameter of fn map array causes a double drop of a single object. This...

[20210402] - Core - Inadequate filters on module layout settings

Inadequate filters on module layout settings could lead to an LFI...

DEBIAN-CVE-2020-35921

An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

UBUNTU-CVE-2020-35919

An issue was discovered in the net2 crate before 0.2.36 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

UBUNTU-CVE-2020-35921

An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

UBUNTU-CVE-2020-35920

An issue was discovered in the socket2 crate before 0.3.16 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

Rust Security Vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in net2 crate before 0.2.36 for Rust, which stems from its incorrect expectation of the std::net::SocketAddr memory representation...

Rust security vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in miow crate for Rust prior to version 0.3.6, which stems from an incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability are...

Rust security vulnerabilities

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in mio crate for Rust prior to version 0.7.6, which stems from an incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability are...

Rust Socket crate security vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in socket2 crate for Rust prior to version 0.3.16, which stems from its incorrect expectation of the std::net::SocketAddr memory representation. No details of the vulnerability ar...

WordPress Team Showcase plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Team Showcase plugin before 1.22.16 for WordPress...

Secret Net Kernel Driver Privilege Bypass ASLR

The vulnerability of the kernel driver sncc0.sys in the Secret Net and Secret Net Studio security solutions is related to privilege management errors. Exploiting this vulnerability allows an attacker to bypass the Randomization of the Operating System’s Kernel Address Space ASLR mechanism and...

Virtuozzo 6 : java-1.8.0-openjdk / java-1.8.0-openjdk-debug / etc (VZLSA-2019-0774)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2020-26965

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field wa...

CVE-2020-26965

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field wa...