Lucene search
+L

94 matches found

Positive Technologies
Positive Technologies
•added 2021/08/25 12:00 a.m.•1 views

PT-2021-24463

Name of the Vulnerable Software and Affected Versions: Singleton affected versions not specified Description: The issue arises from the Singleton implementation, which unconditionally implements Sync and Send. This allows non-Sync types, such as Cell, to be used in singletons, potentially causing...

5.7AI score
SaveExploits0References4
OSV
OSV
•added 2021/08/08 6:15 a.m.•18 views

CVE-2020-36435

An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks...

8.1CVSS5.8AI score0.00766EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/08 6:15 a.m.•34 views

CVE-2020-36435

An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks...

8.1CVSS0.00766EPSS
SaveExploits0References2
Prion
Prion
•added 2021/08/08 6:15 a.m.•27 views

Design/Logic Flaw

An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks...

6.8CVSS8AI score0.00766EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/08/08 5:19 a.m.•2 views

CVE-2020-36435

An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks...

9.2CVSS0.00766EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2021/08/08 5:19 a.m.•41 views

CVE-2020-36435

An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks...

8.1AI score0.00766EPSS
SaveExploits0References2
CVE
CVE
•added 2021/08/08 5:19 a.m.•131 views

CVE-2020-36435

CVE-2020-36435 affects the Rust crate ruspiro-singleton prior to 0.4.1. The issue is that Singleton did not enforce bounds on Send and Sync, allowing non-Sync types (e.g., Cell) to be used in singletons and potentially cause data races. The vulnerability is captured across multiple catalogs (NVD,...

8.1CVSS8AI score0.00766EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/08 12:00 a.m.•5 views

CVE-2020-36435: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bounds checks...

8.1CVSS5.8AI score0.00766EPSS
SaveExploits0References2
OSV
OSV
•added 2020/11/16 12:00 p.m.•42 views

RUSTSEC-2020-0115 Singleton lacks bounds on Send and Sync.

Singleton is meant to be a static object that can be initialized lazily. In order to satisfy the requirement that static items must implement Sync, Singleton implemented both Sync and Send unconditionally. This allows for a bug where non-Sync types such as Cell can be used in singletons and cause...

8.1CVSS7.8AI score0.00766EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2020/11/16 12:00 p.m.•6 views

ruspiro-boot (>=0.3.0, <=0.3.2), ruspiro-console (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2020-36435 via ruspiro-singleton (>=0.0.2, <=0.3.1)

ruspiro-singleton CARGO version =0.0.2, =0.3.0, =0.0.2, =0.0.2, =0.3.0, =0.1.0, =0.0.2, =0.4.0, =0.0.2, =0.3.1 Source cves: CVE-2020-36435 Source advisory: OSV:RUSTSEC-2020-0115...

8.1CVSS7.8AI score0.00766EPSS
SaveExploits0
RustSec
RustSec
•added 2020/11/16 12:00 p.m.•28 views

Singleton lacks bounds on Send and Sync.

Singleton is meant to be a static object that can be initialized lazily. In order to satisfy the requirement that static items must implement Sync, Singleton implemented both Sync and Send unconditionally. This allows for a bug where non-Sync types such as Cell can be used in singletons and cause...

8.1CVSS1.4AI score0.00766EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2020/11/16 12:00 a.m.•3 views

PT-2020-17614

Name of the Vulnerable Software and Affected Versions ruspiro-singleton versions prior to 0.4.1 Description The issue arises from the unconditional implementation of Sync and Send in Singleton, allowing non-Sync types like Cell to be used in singletons. This can cause data races in concurrent...

8.1CVSS0.00766EPSS
SaveExploits0References11
RedHat Linux
RedHat Linux
•added 2016/05/11 2:09 p.m.•15 views

JDK: insecure deserialization in CORBA, incorrect CVE-2013-5456 fix

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 6.0.16.25, 6 R1 before SR8 FP25 6.1.8.25, 7 before SR9 FP40 7.0.9.40, 7 R1 before SR3 FP40 7.1.3.40, and 8 before SR3 8.0.3.0 does not properly deserialize classes in an AccessController...

9.3CVSS7.9AI score0.06028EPSS
SaveExploits0References5
OSV
OSV
•added 2007/11/07 11:46 p.m.•14 views

DEBIAN-CVE-2007-4768

Heap-based buffer overflow in Perl-Compatible Regular Expression PCRE library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pattern, which is incorrectly optimized...

6.8CVSS8.3AI score0.04097EPSS
SaveExploits0References1
Rows per page
Query Builder