Lucene search
K

1254 matches found

CNVD
CNVD
added 2021/02/03 12:0 a.m.7 views

Unspecified Vulnerability in Rust (CNVD-2021-13685)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Deserializer :: readvec in the cdr package of Rust prior to 0.2.4, which stems from the fact that the user-supplied read implementation of Deserializer :: readvec can access th...

9.8CVSS6.5AI score0.01688EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/03 12:0 a.m.10 views

Nim Input Validation Error Vulnerability

Nim is a statically typed programming language from the Nim community. An input validation error vulnerability exists in versions of Nim prior to 1.2.6, which stems from a failure of the standard library asyncftpclient to check whether a message contains line breaks. No details of the vulnerabili...

9.8CVSS6.4AI score0.0318EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2021/02/02 12:10 p.m.287 views

Moderate: Red Hat Security Advisory: perl security update

An update for perl is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

8.6CVSS7AI score0.11334EPSS
Exploits0References4
CNVD
CNVD
added 2021/02/01 12:0 a.m.5 views

Unspecified Vulnerability in Rust (CNVD-2021-17270)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.9.2. The vulnerability stems from an issue found in the program basicdspmatrix, which can perform two delete operations. No details of the vulnerabilit...

7.5CVSS6.7AI score0.01327EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.7 views

Unspecified Vulnerability in Rust (CNVD-2021-13694)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust prior to 0.9.11, which stems from double line deletion by a util::mutate,mutate2 when panic occurs. No details of the vulnerability are provided at this time...

9.8CVSS6.6AI score0.01552EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.8 views

Unspecified Vulnerability in Rust (CNVD-2021-13695)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.1.1. The vulnerability stems from a lack of program soundness and may read uninitialized memory. No details of the vulnerability are provided at this...

9.1CVSS6.6AI score0.01642EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.4 views

Rust Resource Management Error Vulnerability (CNVD-2021-17269)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in Rust fil-ocl crate through 2021-01-04, which stems from From leading to double free.No details of the vulnerability are available at this time...

7.5CVSS6.5AI score0.01327EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.8 views

Unspecified Vulnerability in Rust (CNVD-2021-13697)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust. The vulnerability stems from the dereference of a program's raw pointer. No details of the vulnerability are available at this time...

7.5CVSS6.7AI score0.01397EPSS
Exploits1References1
CNVD
CNVD
added 2021/02/01 12:0 a.m.8 views

Unspecified Vulnerability in Rust (CNVD-2021-13699)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust lazy-init crate through 2021-01-17, which stems from a lack of send bindings in Lazy, leading to data contention. No details of the vulnerability are provided at this time...

5.3CVSS6.6AI score0.01314EPSS
Exploits0References1
CNVD
CNVD
added 2021/01/29 12:0 a.m.9 views

Rust Memory Corruption Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust has a memory corruption vulnerability in versions prior to 0.2.3. The vulnerability stems from the program's implied randomness to arrays, so that uninitialized memory may be discarded in the event of an...

7.8CVSS6.8AI score0.00426EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2021/01/26 6:16 p.m.40 views

CVE-2021-3115

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo for example, cgo can execute a gcc program from an untrusted download...

7.5CVSS7.8AI score0.06445EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2021/01/26 2:14 a.m.44 views

CVE-2021-3115

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo for example, cgo can execute a gcc program from an untrusted download...

7.5CVSS8.3AI score0.06445EPSS
Exploits0
Fedora
Fedora
added 2021/01/23 1:32 a.m.89 views

[SECURITY] Fedora 33 Update: python3.9-3.9.1-2.fc33

Python 3.9 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

9.8CVSS2.1AI score0.23293EPSS
Exploits1
OSV
OSV
added 2021/01/20 4:15 p.m.3 views

CVE-2020-35272

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

4.8CVSS5.8AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/01/14 1:40 p.m.4 views

golang: malicious symbol names can lead to code execution at build time

An input validation vulnerability was found in Go. From a generated go file from the cgo tool, it is possible to modify symbols within that object file and specify code. This flaw allows an attacker to create a repository that includes malicious pre-built object files that could execute arbitrary...

7.5CVSS7.6AI score0.02244EPSS
Exploits0References5
NVD
NVD
added 2021/01/12 4:15 a.m.24 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS9.7AI score0.0224EPSS
Exploits1References3
OSV
OSV
added 2021/01/12 4:15 a.m.7 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

9.8CVSS6.9AI score
Exploits0References3
OSV
OSV
added 2021/01/12 4:15 a.m.4 views

DEBIAN-CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

9.8CVSS8.5AI score0.0224EPSS
Exploits1References1
Prion
Prion
added 2021/01/12 4:15 a.m.22 views

Path traversal

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS9.6AI score0.0224EPSS
Exploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2021/01/12 4:15 a.m.355 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS7.2AI score0.0224EPSS
Exploits1References3
Rows per page
Query Builder