Lucene search
K

309 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:39 a.m.1 views

CVE-2023-26268

Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document functions: validatedocupdate list filter filter views using view functions as filters rewrite update This doesn't affect map/reduce or searc...

5.3CVSS6.9AI score0.00055EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:11 a.m.3 views

CVE-2023-43631

On boot, the Pillar eve container checks for the existence and content of “/config/authorizedkeys”. If the file is present, and contains a supported public key, the container will go on to open port 22 and enable sshd with the given keys as the authorized keys for root login. An attacker could...

8.8CVSS6.9AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:37 p.m.5 views

CVE-2020-36467

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object...

5.9CVSS6.8AI score0.0028EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 4:38 p.m.4 views

CVE-2020-35916

An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. In the case of LLVM, the IR may be always correct...

5.5CVSS6.8AI score0.00054EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 4:38 p.m.6 views

CVE-2020-35899

An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

5.5CVSS6.8AI score0.00054EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:59 p.m.6 views

CVE-2020-0388

In createEmergencyLocationUserNotification of GnssVisibilityControl.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product:...

7.8CVSS7.1AI score0.0001EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:40 p.m.5 views

CVE-2020-35898

An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

9.1CVSS6.8AI score0.00334EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:39 p.m.4 views

CVE-2020-35882

An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race...

8.1CVSS6.8AI score0.00336EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 3:34 p.m.4 views

CVE-2020-36470

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

5.9CVSS6.8AI score0.0028EPSS
Exploits1
RedhatCVE
RedhatCVE
added 2025/05/22 1:29 p.m.5 views

CVE-2018-25024

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can unsoundly coerce an immutable reference into a mutable reference, leading to memory corruption...

9.8CVSS6.7AI score0.00363EPSS
Exploits0References1
OSV
OSV
added 2025/05/15 4:22 p.m.0 views

GHSA-GG76-HG3V-5Q6C macroquad vulnerable to multiple soundness issues

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code. Currently, no fixed version is available...

8.7CVSS5.8AI score
Exploits0References6
Github Security Blog
Github Security Blog
added 2025/05/15 4:22 p.m.20 views

macroquad vulnerable to multiple soundness issues

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code. Currently, no fixed version is available...

7.2AI score
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/15 12:0 a.m.2 views

PT-2025-21902 · Crates.Io · Macroquad

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code. Currently, no fixed version is available...

8.7CVSS7.3AI score
Exploits0References7
RustSec
RustSec
added 2025/05/06 12:0 p.m.6 views

Lack of sufficient checks in public API

The following functions in the anon-vec crate are unsound due to insufficient checks on their arguments:: - AnonVec::getref - AnonVec::getmut - AnonVec::removeget The crate was built as a learning project and is not being maintained...

7AI score
Exploits0Affected Software1
Packet Storm News
Packet Storm News
added 2025/04/24 12:0 a.m.2 views

AI-Based Vulnerability Analysis of NFT Smart Contracts

With the rapid growth of the NFT market, the security of smart contracts has become crucial. However, existing AI-based detection models for NFT contract vulnerabilities remain limited due to their complexity, while traditional manual methods are time-consuming and costly. This study proposes an...

7.1AI score
Exploits0
RustSec
RustSec
added 2025/04/23 12:0 p.m.6 views

Multiple soundness issues in `macroquad`

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code. Currently, no fixed version is available...

7.2AI score
Exploits0
OSV
OSV
added 2025/04/23 12:0 p.m.2 views

RUSTSEC-2025-0035 Multiple soundness issues in `macroquad`

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code. Currently, no fixed version is available...

7.2AI score
Exploits0References6
Positive Technologies
Positive Technologies
added 2025/04/23 12:0 a.m.2 views

PT-2025-21910 · Crates.Io · Macroquad

Several soundness issues have been reported. Resolving them doesn't seem to be considered a priority. In particular, unprincipled use of mutable statics is pervasive throughout the library, making it possible to cause use-after-free in safe code. Currently, no fixed version is available...

7.3AI score
Exploits0References7
OSV
OSV
added 2024/12/23 7:26 p.m.3 views

GHSA-3QX8-RV27-J6GP Undefined behaviour in `kvm_ioctls::ioctls::vm::VmFd::create_device`

An issue was identified in the VmFd::createdevice function, leading to undefined behavior and miscompilations on rustc 1.82.0 and newer due to the function's violation of Rust's pointer safety rules. The function downcasted a mutable reference to its struct kvmcreatedevice argument to an immutabl...

7.3AI score
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/12/23 7:26 p.m.6 views

Undefined behaviour in `kvm_ioctls::ioctls::vm::VmFd::create_device`

An issue was identified in the VmFd::createdevice function, leading to undefined behavior and miscompilations on rustc 1.82.0 and newer due to the function's violation of Rust's pointer safety rules. The function downcasted a mutable reference to its struct kvmcreatedevice argument to an immutabl...

7.3AI score
Exploits0References3Affected Software1
Rows per page
Query Builder