Lucene search
+L

6817 matches found

Github Security Blog
Github Security Blog
•added 2021/08/25 8:45 p.m.•39 views

Use after free in portaudio-rs

Affected versions of this crate is not panic safe within callback functions streamcallback and streamfinishedcallback. The call to user-provided closure might panic before a mem::forget call, which then causes a use after free that grants attacker to control the callback function pointer. This...

9.8CVSS9.5AI score0.02506EPSS
SaveExploits1References5Affected Software1
osv_ghsa
osv_ghsa
•added 2021/08/25 8:45 p.m.•69 views

GHSA-QPJR-CH72-2QQ4 Use after free in portaudio-rs

Affected versions of this crate is not panic safe within callback functions streamcallback and streamfinishedcallback. The call to user-provided closure might panic before a mem::forget call, which then causes a use after free that grants attacker to control the callback function pointer. This...

9.8CVSS9.7AI score0.02506EPSS
SaveExploits1References5
osv_ghsa
osv_ghsa
•added 2021/08/25 8:45 p.m.•30 views

GHSA-X54V-QXXR-93QC Missing release of memory in sized-chunks

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

7.5CVSS7.7AI score0.02897EPSS
SaveExploits6References4
vulnersOsv
vulnersOsv
•added 2021/08/25 8:43 p.m.•7 views

nifti (>=0.3.1, <=0.6.0), trk-io (>=0.3.0, <=0.11.0) potentially affected by CVE-2018-21000 via safe-transmute (>=0.5.0, <=0.8.0)

safe-transmute CARGO version =0.5.0, =0.3.1, =0.3.0, =0.11.0 Source cves: CVE-2018-21000 Source advisory: OSV:GHSA-2V78-J59H-FMPF...

9.8CVSS8.5AI score0.01977EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2021/08/25 8:43 p.m.•33 views

Heap overflow or corruption in safe-transmute

Affected versions of this crate switched the length and capacity arguments in the Vec::fromrawparts constructor, which could lead to memory corruption or data leakage...

9.8CVSS9.1AI score0.01977EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2021/08/24 12:00 a.m.•22 views

F5 BIG-IP输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP TMM, which stems from an undisclosed request when configuring the...

7.5CVSS5.8AI score0.00933EPSS
SaveExploits0References4
Fedora
Fedora
•added 2021/08/18 1:12 a.m.•41 views

[SECURITY] Fedora 34 Update: rust-gettext-rs-0.7.0-1.fc34

Safe bindings for gettext...

9.8CVSS1.5AI score0.01907EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/08/16 12:00 a.m.•40 views

OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Windows

OpenSSL is prone to TLS ephemeral ECDH crashes. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5CVSS8.1AI score0.04561EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2021/08/16 12:00 a.m.•40 views

OpenSSL: TLS Ephemeral ECDH Crashes (20110906) - Linux

OpenSSL is prone to TLS ephemeral ECDH crashes. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5CVSS8.1AI score0.04561EPSS
SaveExploits0References1
NVD
NVD
•added 2021/08/11 11:15 a.m.•29 views

CVE-2021-33594

An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears like a legitimate one on the address bar, while the content comes from other domain and presented in a window, covering the original content. A...

3.5CVSS0.01075EPSS
SaveExploits0References3
NVD
NVD
•added 2021/08/11 11:15 a.m.•31 views

CVE-2021-33595

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address...

3.5CVSS0.01075EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2021/08/11 11:15 a.m.•18 views

CVE-2021-33595

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address...

3.5CVSS5.8AI score0.01075EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2021/08/11 11:15 a.m.•16 views

CVE-2021-33594

An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears like a legitimate one on the address bar, while the content comes from other domain and presented in a window, covering the original content. A...

3.5CVSS5.9AI score0.01075EPSS
SaveExploits0References3
Prion
Prion
•added 2021/08/11 11:15 a.m.•27 views

Spoofing

An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears like a legitimate one on the address bar, while the content comes from other domain and presented in a window, covering the original content. A...

3.5CVSS4.1AI score0.01075EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/08/11 11:15 a.m.•11 views

CVE-2021-33594

An address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted a malicious URL, it appears like a legitimate one on the address bar, while the content comes from other domain and presented in a window, covering the original content. A...

3.5CVSS6AI score0.01075EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2021/08/11 11:15 a.m.•32 views

Spoofing

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address...

3.5CVSS4.1AI score0.01075EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
•added 2021/08/11 11:15 a.m.•11 views

CVE-2021-33595

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address...

3.5CVSS6AI score0.01075EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2021/08/11 10:28 a.m.•69 views

CVE-2021-33594

CVE-2021-33594 documents an address bar spoofing vulnerability in Safe Browser for Android. The vulnerability allows a remote attacker to present a legitimate-looking URL in the address bar while loading content from a different domain in a window, effectively deceiving users. Reported consistent...

3.5CVSS3.9AI score0.01075EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2021/08/11 10:28 a.m.•34 views

CVE-2021-33595 F-Secure Safe browser for iOS vulnerable to Address Bar Spoofing

A address bar spoofing vulnerability was discovered in Safe Browser for iOS. Showing the legitimate URL in the address bar while loading the content from other domain. This makes the user believe that the content is served by a legit domain. A remote attacker can leverage this to perform address...

3.5CVSS4.3AI score0.01075EPSS
SaveExploits0References3
CVE
CVE
•added 2021/08/11 10:28 a.m.•83 views

CVE-2021-33595

Affected product. Safe Browser for iOS (F-Secure Safe Browser). Issue. Address bar spoofing: the address bar shows a legitimate URL while loading content from another domain, causing users to believe the content is from a trusted site. Root cause (as described). A mismatch between displayed URL a...

3.5CVSS3.9AI score0.01075EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder