Vulnerabilities (CVE)

Total 318327 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-35881 1 Traitobject Project 1 Traitobject 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x.
CVE-2020-35880 1 Bigint Project 1 Bigint 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation.
CVE-2020-35879 1 Rulinalg Project 1 Rulinalg 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rulinalg crate through 2020-02-11 for Rust. There are incorrect lifetime-boundary definitions for RowMut::raw_slice and RowMut::raw_slice_mut.
CVE-2020-35878 1 Ozone Project 1 Ozone 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of the dropping of uninitialized memory.
CVE-2020-35877 1 Ozone Project 1 Ozone 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of out-of-bounds access.
CVE-2020-35876 1 Rio Project 1 Rio 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.
CVE-2020-35875 1 Tokio 1 Tokio-rustls 2024-11-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust. Excessive memory usage may occur when data arrives quickly.
CVE-2020-35874 1 Internment Project 1 Internment 2024-11-21 6.8 MEDIUM 8.1 HIGH
An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free.
CVE-2020-35873 1 Rusqlite Project 1 Rusqlite 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free.
CVE-2020-35872 1 Rusqlite Project 1 Rusqlite 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type.
CVE-2020-35871 1 Rusqlite Project 1 Rusqlite 2024-11-21 6.8 MEDIUM 8.1 HIGH
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.
CVE-2020-35870 1 Rusqlite Project 1 Rusqlite 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free.
CVE-2020-35869 1 Rusqlite Project 1 Rusqlite 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because rusqlite::trace::log mishandles format strings.
CVE-2020-35868 1 Rusqlite Project 1 Rusqlite 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification.
CVE-2020-35867 1 Rusqlite Project 1 Rusqlite 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module.
CVE-2020-35866 1 Rusqlite Project 1 Rusqlite 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor.
CVE-2020-35865 1 Os Str Bytes Project 1 Os Str Bytes 2024-11-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the os_str_bytes crate before 2.0.0 for Rust. It has false expectations about char::from_u32_unchecked behavior.
CVE-2020-35864 1 Google 1 Flatbuffers 2024-11-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks.
CVE-2020-35863 1 Hyper 1 Hyper 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface.
CVE-2020-35862 1 Bitvec Project 1 Bitvec 2024-11-21 7.5 HIGH 9.8 CRITICAL
An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free.