| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-26165 | 6.5 | qdPM through 9.1 allows PHP Object Injection via timeReportActions::executeExport in core/apps/qdPM/modules/timeReport/actions/actions.class.php because unserialize is used. | 2021-07-21 11:39:00 | 2020-12-31 21:15:00 |
| CVE-2020-35893 | 5.0 | An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninitialized memory. | 2021-07-21 11:39:00 | 2020-12-31 10:15:00 |
| CVE-2020-35888 | 7.5 | An issue was discovered in the arr crate through 2020-08-25 for Rust. Uninitialized memory is dropped by Array::new_from_template. | 2021-07-21 11:39:00 | 2020-12-31 10:15:00 |
| CVE-2020-35876 | 7.5 | An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race. | 2021-07-21 11:39:00 | 2020-12-31 10:15:00 |
| CVE-2020-35874 | 6.8 | An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free. | 2021-07-21 11:39:00 | 2020-12-31 10:15:00 |
| CVE-2020-35863 | 7.5 | An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface. | 2021-07-21 11:39:00 | 2020-12-31 10:15:00 |
| CVE-2020-35859 | 6.4 | An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs can experience memory corruption. | 2021-07-21 11:39:00 | 2020-12-31 10:15:00 |
| CVE-2020-35858 | 7.5 | An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., ARM). | 2021-07-21 11:39:00 | 2020-12-31 10:15:00 |
| CVE-2019-25006 | 5.0 | An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong answer. | 2021-07-21 11:39:00 | 2020-12-31 10:15:00 |
| CVE-2020-35926 | 7.5 | An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishandled. | 2021-07-21 11:39:00 | 2020-12-31 09:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: