AskAI (=0.1.0), Boa (>=0.1.4 <=0.1.5) +7098 more potentially affected by CVE-2020-26235 via time (>=0.1.25 <=0.1.45)

time CARGO version =0.1.25, =0.1.4, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.1.1 - ablavema =0.4.2 - abra =0.0.1 and more Source cves: CVE-2020-26235 Source advisory: OSV:RUSTSEC-2020-0071...

Buffer Overflow Vulnerability in FaceTime Component of Multiple Apple Products

Apple iOS, etc. are products of Apple Inc. in the U.S. FaceTime is one of the video calling software packages. A buffer overflow vulnerability exists in the FaceTime component of several Apple products, which can be exploited by an attacker to execute arbitrary code with the help of a malicious...

UBUNTU-CVE-2019-14318

Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousands of signing operations, to compute the private key used. The issue occurs because scalar multiplication in ecp.cpp...

ALPINE-CVE-2018-0361

ClamAV before 0.100.1 lacks a PDF object length check, resulting in an unreasonably long time to parse a relatively small file...

Blue Coat ProxySG local user changes contain a time and state vulnerability

Overview Changes to Blue Coat ProxySG local users do not take effect immediately, giving an attacker with known credentials a window of opportunity to use those credentials even if the user was deleted or the password was changed. CWE-361 Description Blue Coat Security Advisory SA77 states:SGOS...