37 matches found
EUVD-2021-1796
Malware in sbrugna...
EUVD-2022-0681
Malicious code in bioql PyPI...
CVE-2021-45705
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
CVE-2020-35926
An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator even ChaCha to return all zeroes because integer truncation was mishandled...
bp7 (>=0.7.0, <=0.8.1), cala (0.9.0) +4 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)
nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - bp7 =0.7.0, =0.10.0, =0.8.0, =0.9.1 Source cves: CVE-2021-45705 Source advisory: OSV:GHSA-P6GJ-GPC8-F8XW...
bp7 (>=0.7.0, <=0.8.1), cala (0.9.0) +4 more potentially affected by unknown CVE via nanorand (0.5.2)
nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - bp7 =0.7.0, =0.10.0, =0.8.0, =0.9.1 Source cves: unknown CVE Source advisory: GHSA-P6GJ-GPC8-F8XW...
GHSA-R57R-J98G-587F Pointer dereference in nanorand
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
bp7 (>=0.7.0, <=0.8.1), cala (0.9.0) +4 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)
nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - bp7 =0.7.0, =0.10.0, =0.8.0, =0.9.1 Source cves: CVE-2021-45705 Source advisory: OSV:GHSA-R57R-J98G-587F...
bp7 (>=0.7.0, <=0.8.1), cala (0.9.0) +4 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)
nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - bp7 =0.7.0, =0.10.0, =0.8.0, =0.9.1 Source cves: CVE-2021-45705 Source advisory: GHSA-R57R-J98G-587F...
Mozilla Rust has an unspecified vulnerability (CNVD-2022-03125)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. a security vulnerability exists in versions of Rust nanorand crate prior to 0.6.1, which stems from the fact that the same object can have multiple mutable references. No details of the vulnerability are current...
CVE-2021-45705
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
CVE-2021-45705
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
CVE-2021-45705
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
Null pointer dereference
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
Rust security vulnerabilities
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. a security vulnerability exists in versions of Rust nanorand crate prior to 0.6.1, which stems from the fact that the same object can have multiple mutable references. No details of the vulnerability are current...
CVE-2021-45705
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
CVE-2021-45705
The CVE-2021-45705 entry affects the Rust nanorand crate, specifically versions before 0.6.1. The root cause is that the TlsWyRand Deref implementation dereferences a raw pointer, which can yield multiple mutable references to the same object and results in undefined behavior. Impact described in...
CVE-2021-45705
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
CVE-2021-45705: Undefined Security Weakness
An issue was discovered in the nanorand crate before 0.6.1 for Rust. There can be multiple mutable references to the same object because the TlsWyRand Deref implementation dereferences a raw pointer...
bp7 (>=0.7.0, <=0.8.1), cala (0.9.0) +4 more potentially affected by CVE-2021-45705 via nanorand (0.5.2)
nanorand CARGO version 0.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on nanorand and may be impacted: - bp7 =0.7.0, =0.10.0, =0.8.0, =0.9.1 Source cves: CVE-2021-45705 Source advisory: OSV:RUSTSEC-2021-0114...