Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-35928 1.9 An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync. 2021-01-06 18:27:00
CVE-2020-35905 1.9 An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations (in safe code). 2021-01-06 18:27:00
CVE-2019-25007 5.0 An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can cause a panic. 2021-01-06 18:12:00
CVE-2020-35927 2.1 An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex<T> allows cross-thread data races of non-Send types. 2021-01-06 18:09:00
CVE-2020-26296 3.5 Vega is a visualization grammar, a declarative format for creating, saving, and sharing interactive visualization designs. Vega in an npm package. In Vega before version 5.17.3 there is an XSS vulnerability in Vega expressions. Through a specially cr 2021-01-06 18:06:00
CVE-2020-35903 2.1 An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question. 2021-01-06 17:43:00
CVE-2020-35917 2.1 An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>. 2021-01-06 17:17:00
CVE-2020-35916 2.1 An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. (In the case of LLVM, the IR may be always correct.) 2021-01-06 16:36:00
CVE-2019-16960 3.5 SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field. 2021-01-06 16:34:00
CVE-2019-16956 3.5 SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket. 2021-01-06 16:34:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: