Lucene search
+L

1286 matches found

CNVD
CNVD
added 2021/02/01 12:00 a.m.10 views

Unspecified Vulnerability in Rust (CNVD-2021-13699)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust lazy-init crate through 2021-01-17, which stems from a lack of send bindings in Lazy, leading to data contention. No details of the vulnerability are provided at this time...

5.3CVSS6.6AI score0.01314EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/02/01 12:00 a.m.6 views

Unspecified Vulnerability in Rust (CNVD-2021-17270)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.9.2. The vulnerability stems from an issue found in the program basicdspmatrix, which can perform two delete operations. No details of the vulnerabilit...

7.5CVSS6.7AI score0.01327EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/02/01 12:00 a.m.62 views

Unspecified Vulnerability in Rust (CNVD-2021-13694)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust prior to 0.9.11, which stems from double line deletion by a util::mutate,mutate2 when panic occurs. No details of the vulnerability are provided at this time...

9.8CVSS6.6AI score0.01552EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/29 12:00 a.m.16 views

Rust Memory Corruption Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Rust has a memory corruption vulnerability in versions prior to 0.2.3. The vulnerability stems from the program's implied randomness to arrays, so that uninitialized memory may be discarded in the event of an...

7.8CVSS6.8AI score0.00426EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/01/26 6:16 p.m.48 views

CVE-2021-3115

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo for example, cgo can execute a gcc program from an untrusted download...

7.5CVSS7.8AI score0.06497EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2021/01/26 2:14 a.m.54 views

CVE-2021-3115

Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use of cgo for example, cgo can execute a gcc program from an untrusted download...

7.5CVSS8.3AI score0.06497EPSS
SaveExploits0
Fedora
Fedora
added 2021/01/23 1:32 a.m.93 views

[SECURITY] Fedora 33 Update: python3.9-3.9.1-2.fc33

Python 3.9 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

9.8CVSS2.1AI score0.23293EPSS
SaveExploits1
OSV
OSV
added 2021/01/20 4:15 p.m.11 views

CVE-2020-35272

Employee Performance Evaluation System in PHP/MySQLi with Source Code 1.0 is affected by cross-site scripting XSS in the Admin Portal in the Task and Description fields...

4.8CVSS5.8AI score0.00591EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2021/01/14 1:40 p.m.10 views

golang: malicious symbol names can lead to code execution at build time

An input validation vulnerability was found in Go. From a generated go file from the cgo tool, it is possible to modify symbols within that object file and specify code. This flaw allows an attacker to create a repository that includes malicious pre-built object files that could execute arbitrary...

7.5CVSS7.6AI score0.02342EPSS
SaveExploits0References5
OSV
OSV
added 2021/01/12 4:15 a.m.6 views

DEBIAN-CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

9.8CVSS8.5AI score0.0224EPSS
SaveExploits1References1
NVD
NVD
added 2021/01/12 4:15 a.m.45 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS9.7AI score0.0224EPSS
SaveExploits1References3
OSV
OSV
added 2021/01/12 4:15 a.m.10 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

9.8CVSS6.9AI score
SaveExploits0References3
Prion
Prion
added 2021/01/12 4:15 a.m.29 views

Path traversal

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS9.6AI score0.0224EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
added 2021/01/12 4:15 a.m.372 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS7.2AI score0.0224EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2021/01/12 12:00 a.m.98 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

10CVSS9.8AI score0.0224EPSS
SaveExploits1
Cvelist
Cvelist
added 2021/01/12 12:00 a.m.53 views

CVE-2020-27637

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD install cli command or the install.packages function from the interpreter. Update to version 4.0....

9.7AI score0.0224EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/01/06 12:00 a.m.78 views

Rust Competitive Conditioning Problem Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A Competition Condition Issue vulnerability exists in Rust concread crate versions prior to 0.2.6, which can be exploited by an attacker to cause data contention in ARCache by sending a type that does not...

4.7CVSS6.5AI score0.00242EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/06 12:00 a.m.93 views

Unspecified Vulnerability in Rust (CNVD-2021-37535)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in versions prior to Rust magnetic crate 2.0.1 that stems from MPMCConsumer and MPMCProducer allowing cross-threaded sends of non-sending types. No details of the vulnerability ar...

5.5CVSS6.6AI score0.00377EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/01/06 12:00 a.m.21 views

Mozilla Rust ozone crate buffer overflow vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in ozone crate in versions of Mozilla Rust prior to 2020-07-04, which stems from an out-of-bounds access that violates memory safety. No details of the vulnerability are...

9.8CVSS6.9AI score0.01515EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/01/06 12:00 a.m.27 views

Rust Resource Management Error Vulnerability (CNVD-2021-39556)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A resource management error vulnerability exists in Rust pyo3 crate versions prior to 0.12.4, which stems from a reference counting error and post-release usage in From . No details of the vulnerability are...

5.5CVSS6.5AI score0.00388EPSS
SaveExploits1References1
Rows per page
Query Builder