Lucene search
+L

500 matches found

Github Security Blog
Github Security Blog
•added 2021/08/25 8:48 p.m.•46 views

Data races in rulinalg

The affected version of rulinalg has incorrect lifetime boundary definitions for RowMut::rawslice and RowMut::rawslicemut. They do not conform with Rust's borrowing rule and allows the user to create multiple mutable references to the same location. This may result in unexpected calculation resul...

9.8CVSS8.9AI score0.01668EPSS
SaveExploits1References4Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2021/08/25 12:00 a.m.•28 views

Use after free in actix-utils

An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

9.1CVSS7.2AI score0.01428EPSS
SaveExploits1References6Affected Software1
GitLab Advisory Database
GitLab Advisory Database
•added 2021/08/25 12:00 a.m.•29 views

Use after free in actix-service

An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data...

5.5CVSS6.1AI score0.00379EPSS
SaveExploits1References6Affected Software1
Fedora
Fedora
•added 2021/08/16 1:18 a.m.•44 views

[SECURITY] Fedora 34 Update: rust-tui-react-0.15.0-2.fc34

TUI widgets using a react-like paradigm, allowing mutable component state and render properties...

9.8CVSS9.9AI score0.01907EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/12 10:00 p.m.•21 views

CVE-2021-37681

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of SVDF in TFLite is vulnerable to a null pointer error. The GetVariableInput function can return a null pointer but GetTensorData assumes that the argument is always a valid tensor...

7.8CVSS6.9AI score0.00173EPSS
SaveExploits0
NVD
NVD
•added 2021/08/08 6:15 a.m.•45 views

CVE-2020-36470

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

5.9CVSS0.00978EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/08/08 6:15 a.m.•16 views

CVE-2020-36470

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

5.9CVSS6.2AI score0.00978EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2021/08/08 6:15 a.m.•24 views

CVE-2020-36467

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object...

5.9CVSS6.2AI score0.00978EPSS
SaveExploits3References2
NVD
NVD
•added 2021/08/08 6:15 a.m.•36 views

CVE-2020-36467

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object...

5.9CVSS0.00978EPSS
SaveExploits1References2
Prion
Prion
•added 2021/08/08 6:15 a.m.•20 views

Design/Logic Flaw

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object...

4.3CVSS5.7AI score0.00978EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2021/08/08 6:15 a.m.•27 views

Memory corruption

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

4.3CVSS5.7AI score0.00978EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2021/08/08 5:12 a.m.•151 views

CVE-2020-36467

The CVE-2020-36467 entry concerns the Rust crate cgc . The root cause is that Ptr::get returns multiple mutable references to the same object, violating alias rules. Multiple connected sources describe this issue and note potential data races when the crate is used across threads. The records ref...

5.9CVSS5.5AI score0.00978EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/08/08 5:12 a.m.•8 views

CVE-2020-36467

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object...

8.2CVSS0.00978EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2021/08/08 5:12 a.m.•48 views

CVE-2020-36467

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object...

5.7AI score0.00978EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/08/08 5:11 a.m.•45 views

CVE-2020-36470

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

5.7AI score0.00978EPSS
SaveExploits1References2
CVE
CVE
•added 2021/08/08 5:11 a.m.•126 views

CVE-2020-36470

CVE-2020-36470 affects the Rust crate disrustor, specifically the RingBuffer component. The root cause is that RingBuffer does not properly limit the number of mutable references, which can allow multiple mutable references to be created. This leads to potential data races and undefined behavior....

5.9CVSS5.6AI score0.00978EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2021/08/08 5:11 a.m.•7 views

CVE-2020-36470

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

8.2CVSS0.00978EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/08 12:00 a.m.•5 views

CVE-2020-36467: Undefined Security Weakness

An issue was discovered in the cgc crate through 2020-12-10 for Rust. Ptr::get returns more than one mutable reference to the same object...

5.9CVSS5.8AI score0.00978EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/08 12:00 a.m.•4 views

CVE-2020-36470: Undefined Security Weakness

An issue was discovered in the disrustor crate through 2020-12-17 for Rust. RingBuffer doe not properly limit the number of mutable references...

5.9CVSS5.8AI score0.00978EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/07/14 2:15 p.m.•11 views

CVE-2020-0417

In setNiNotification of GpsNetInitiatedHandler.java, there is a possible permissions bypass due to an empty mutable PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.6AI score0.00137EPSS
SaveExploits0References2
Rows per page
Query Builder