Lucene search
+L

4083 matches found

NVD
NVD
added 2021/01/26 6:16 p.m.34 views

CVE-2021-25902

An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, maparray can perform a double drop...

7.5CVSS7.5AI score0.0139EPSS
SaveExploits1References1
Prion
Prion
added 2021/01/26 6:16 p.m.24 views

Double free

An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, maparray can perform a double drop...

5CVSS7.5AI score0.0139EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2021/01/26 12:00 a.m.16 views

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust glsl-layout crate before 0.4.0, which stems from double deletion of maparray when panic occurs. No details of the vulnerability are provided at this time...

7.5CVSS7.1AI score0.0139EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/01/22 9:03 a.m.42 views

CVE-2021-25902

An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, maparray can perform a double drop...

7.7AI score0.0139EPSS
SaveExploits1References1
CVE
CVE
added 2021/01/22 9:03 a.m.66 views

CVE-2021-25902

The CVE-2021-25902 issue affects the Rust crate glsl-layout prior to 0.4.0, where panicking inside the user-provided function f of map_array can cause a double drop of a single object. The root cause is inadequate handling of panic, allowing the object to be dropped twice. The vulnerability was m...

7.5CVSS7.5AI score0.0139EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2021/01/22 12:00 a.m.11 views

Vtiger CRM Path Traversal Vulnerability

Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides management, collection and analysis of customer information and other functions. Vtiger CRM v7.2.0 suffers from a path traversal vulnerability that can...

6.5CVSS6.7AI score0.03613EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/22 12:00 a.m.10 views

OpenMage Magento Lts Injection Vulnerability

OpenMage Magento Lts is an e-commerce system organized by OpenMage. A security vulnerability exists in OpenMage Magento Lts before versions 19.4.10 and 20.0.5, which originates from the fact that an administrator with privileges to import and export data and edit cms pages can inject executable...

8.7CVSS6.9AI score0.01782EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/21 2:15 p.m.39 views

CVE-2020-26295

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export data and to edit cms pages was able to inject an executable file on the server via layout xml. The latest OpenMage Versions up from 19.4.9 an...

8.7CVSS8.6AI score0.01782EPSS
SaveExploits0References3
Prion
Prion
added 2021/01/21 2:15 p.m.18 views

Design/Logic Flaw

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export data and to edit cms pages was able to inject an executable file on the server via layout xml. The latest OpenMage Versions up from 19.4.9 an...

6.5CVSS6.8AI score0.01782EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2021/01/21 1:40 p.m.35 views

CVE-2020-26295 CMS Editor code execution

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export data and to edit cms pages was able to inject an executable file on the server via layout xml. The latest OpenMage Versions up from 19.4.9 an...

8.7CVSS8.6AI score0.01782EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/01/21 12:00 a.m.13 views

OpenMage Magento Lts 路径遍历漏洞

OpenMage Magento Lts is an e-commerce system organized by OpenMage. A security vulnerability exists in OpenMage Magento Lts before versions 19.4.10 and 20.0.5, which originates from the fact that an administrator with privileges to import and export data and edit cms pages can inject executable...

8.7CVSS7.1AI score0.01782EPSS
SaveExploits0References4
OSV
OSV
added 2021/01/20 10:15 p.m.21 views

CVE-2020-26252

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to update product data to be able to store an executable file on the server...

7.2CVSS7.5AI score
SaveExploits0References2
NVD
NVD
added 2021/01/20 10:15 p.m.32 views

CVE-2020-26252

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to update product data to be able to store an executable file on the server...

8.7CVSS8.9AI score0.02057EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/20 10:15 p.m.24 views

Remote code execution

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to update product data to be able to store an executable file on the server...

6.5CVSS7.2AI score0.02057EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/01/20 9:55 p.m.35 views

CVE-2020-26252 Layout XML RCE Vulnerability in OpenMage

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to update product data to be able to store an executable file on the server...

8.7CVSS8.8AI score0.02057EPSS
SaveExploits0References2
Prion
Prion
added 2021/01/20 1:15 a.m.19 views

Information disclosure

Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories by using /libraries and /layout directories...

4.3CVSS6.5AI score0.03613EPSS
SaveExploits1References3Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2021/01/17 12:00 a.m.7 views

VulnCheck KEV: CVE-2023-21492

Samsung mobile devices running Android 11, 12, and 13 contain an insertion of sensitive information into log file vulnerability that allows a privileged, local attacker to conduct an address space layout randomization ASLR bypass...

4.4CVSS6AI score0.02554EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
added 2021/01/10 12:00 p.m.1 views

amethyst (>=0.11.0, <=0.15.3), amethyst-console (0.1.0) +22 more potentially affected by CVE-2021-25902 via glsl-layout (0.3.2)

glsl-layout CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on glsl-layout and may be impacted: - amethyst =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.6.0, =0.6.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.1.0, =0.6.0, =0.15.3 and more Source cves:...

7.5CVSS7.4AI score0.0139EPSS
SaveExploits1
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2021/01/03 12:00 a.m.34 views

[20210402] - Core - Inadequate filters on module layout settings

Inadequate filters on module layout settings could lead to an LFI...

5.3CVSS2.9AI score0.0101EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2020/12/31 9:15 a.m.5 views

DEBIAN-CVE-2020-35921

An issue was discovered in the miow crate before 0.3.6 for Rust. It has false expectations about the std::net::SocketAddr memory representation...

5.5CVSS5.7AI score0.00387EPSS
SaveExploits1References1
Rows per page
Query Builder