Lucene search
K

7450 matches found

OSV
OSV
added 2021/08/25 9:0 p.m.1 views

GHSA-V42F-J8FX-99F3 Queue<T> should have a Send bound on its Send/Sync traits

Affected versions of this crate unconditionally implements Send/Sync for Queue. This allows 1 creating data races to a T: !Sync and 2 sending T: !Send to other threads, resulting in memory corruption or other undefined behavior...

7.3AI score
Exploits0References3
OSV
OSV
added 2021/08/25 8:59 p.m.0 views

GHSA-JF43-3V8J-QWWR Data races in multiqueue

Affected versions of multiqueue unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior...

8.1CVSS5.9AI score0.00477EPSS
Exploits1References3
OSV
OSV
added 2021/08/25 8:51 p.m.21 views

GHSA-JPHW-P3M6-PJ3C Data races in multiqueue2

Affected versions of this crate unconditionally implemented Send for types used in queue implementations InnerSend, InnerRecv, FutInnerSend, FutInnerRecv. This allows users to send non-Send types to other threads, which can lead to data race bugs or other undefined behavior. The flaw was correcte...

5.9CVSS5.7AI score0.00389EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2021/08/25 8:43 p.m.20 views

Double free in crossbeam

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees. The flaw was corrected by wrapping elements inside queues in a ManuallyDrop...

9.8CVSS8.8AI score0.00425EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2021/08/25 8:43 p.m.12 views

GHSA-C3CW-C387-PJ65 Double free in crossbeam

Even if an element is popped from a queue, crossbeam would run its destructor inside the epoch-based garbage collector. This is a source of double frees. The flaw was corrected by wrapping elements inside queues in a ManuallyDrop...

9.8CVSS9.3AI score0.00425EPSS
Exploits0References4
OSV
OSV
added 2021/08/25 7:15 p.m.1 views

CVE-2021-1523

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause a queue wedge on a leaf switch, which could result in critical control plane traffic to the device being dropped. This could result in...

8.6CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2021/08/25 7:15 p.m.15 views

CVE-2021-1523

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause a queue wedge on a leaf switch, which could result in critical control plane traffic to the device being dropped. This could result in...

8.6CVSS0.00537EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2021/08/25 7:10 p.m.14 views

CVE-2021-1523 Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerability

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause a queue wedge on a leaf switch, which could result in critical control plane traffic to the device being dropped. This could result in...

8.6CVSS7.1AI score0.00537EPSS
Exploits0References1
Cisco
Cisco
added 2021/08/25 4:0 p.m.58 views

Cisco Nexus 9000 Series Fabric Switches ACI Mode Queue Wedge Denial of Service Vulnerability

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI Mode could allow an unauthenticated, remote attacker to cause a queue wedge on a leaf switch, which could result in critical control plane traffic to the device being dropped. This could result in...

8.6CVSS8.5AI score0.00537EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2021/08/17 12:16 p.m.1 views

jenkins: improper permission checks allow canceling queue items and aborting builds

Incorrect Authorization vulnerability was found in Jenkins. Users with Item/Cancel permission are able to cancel queue items and abort builds of jobs even when they do not have Item/Read permission...

4.3CVSS5.7AI score0.01173EPSS
Exploits0References5
NCSC
NCSC
added 2021/08/12 12:0 a.m.6 views

Vulnerability found in Microsoft Printer Spooler service

A vulnerability has been found in the Print Spooler service of Microsoft Windows. A local malicious person without administrator privileges can exploit this vulnerability by connecting to a rogue print server. From this print server, a printer driver is then installed. Although the driver should...

9.8CVSS6.9AI score0.94314EPSS
Exploits76
NVD
NVD
added 2021/08/08 6:15 a.m.11 views

CVE-2020-36453

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue...

8.1CVSS0.00363EPSS
Exploits1References2
OSV
OSV
added 2021/08/08 6:15 a.m.3 views

CVE-2020-36453

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue...

8.1CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2021/08/08 6:15 a.m.12 views

Code injection

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue...

6.8CVSS8AI score0.00363EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/08/08 5:15 a.m.17 views

CVE-2020-36453

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for Queue...

8.1AI score0.00363EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/08/03 12:0 a.m.2 views

SourceCodester Online Covid Vaccination Scheduler System 代码问题漏洞

SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. Efficiently manage COVID-19 vaccinations with a reliable vaccine scheduling and queue management solution. An arbitrary file upload vulnerability exists in the SourceCodester Online Covid...

9.8CVSS5.8AI score0.00412EPSS
Exploits1References2
CNVD
CNVD
added 2021/08/02 12:0 a.m.17 views

SourceCodester Online Covid Vaccination Scheduler System SQL Injection Vulnerability (CNVD-2021-99649)

SourceCodester Online Covid Vaccination Scheduler System is an application from SourceCodester, Inc. efficiently manages COVID-19 vaccinations through a reliable vaccine scheduling and queue management solution. SourceCodester Online Covid Vaccination Scheduler System is vulnerable to SQL...

8.1CVSS3.1AI score0.0131EPSS
Exploits3References1
CNNVD
CNNVD
added 2021/08/02 12:0 a.m.3 views

Swisslog Healthcare Nexus Panel 数字错误漏洞

Swisslog Healthcare Nexus Panel, a medical device from Swisslog Healthcare, has a security vulnerability in versions prior to Nexus Control Panel 7.2.5.7. The vulnerability can be exploited to override the internal queue data structure, allowing for remote code execution...

9.8CVSS6.1AI score0.07565EPSS
Exploits0References6
OSV
OSV
added 2021/07/30 12:0 p.m.26 views

RUSTSEC-2021-0093 Data race in crossbeam-deque

In the affected version of this crate, the result of the race condition is that one or more tasks in the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks are allocated on the heap, this can cause double free and a memory leak. If not, this stil...

9.8CVSS9.6AI score0.01094EPSS
Exploits0References3
NCSC
NCSC
added 2021/07/29 12:0 a.m.5 views

Vulnerabilities fixed in Xerox FreeFlow Print Server

Xerox has fixed vulnerabilities in Freeflow Print Server. This patch update includes, among other things, a fix for the PrintNightmare vulnerability located in the Windows Print Spooler service and affects the Windows Print Queue. Xerox has released updates to fix vulnerabilities in Freeflow prin...

9.8CVSS9.3AI score0.9424EPSS
Exploits44
Rows per page
Query Builder