Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
442 results · page 2 of 9
Jul 27, 2025The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments.CVE-2023-53156 · Other software · ejmahler · reported by MITREMedium 4.5
The transpose crate before 0.2.3 for Rust allows an integer overflow via input_width and input_height arguments.
- Product
- transpose
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 27, 2025The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.CVE-2024-58263 · Other software · CosmWasm · reported by MITRELow 3.7
The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.
- Product
- cosmwasm-std
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 27, 2025The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.CVE-2024-58262 · Other software · dalek-cryptography · reported by MITRELow 2.9
The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.
- Product
- curve25519-dalek
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 27, 2025The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParCVE-2024-58261 · Other software · sequoia-pgp · reported by MITRELow 2.9
The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" messages for RawCertParser operations that encounter an unsupported primary key type.
- Product
- sequoia
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2025The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fielCVE-2025-53605 · Other software · stepancheg · reported by MITREMedium 5.9
The protobuf crate before 3.7.2 for Rust allows uncontrolled recursion in the protobuf::coded_input_stream::CodedInputStream::skip_group parsing of unknown fields in untrusted input.
- Product
- protobuf
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 4, 2025The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length headerCVE-2025-53604 · Other software · pimeys · reported by MITREMedium 4
The web-push crate before 0.10.3 for Rust allows a denial of service (memory consumption) in the built-in clients via a large integer in a Content-Length header.
- Product
- web-push
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 16, 2025A race condition vulnerability exists in Armoury Crate.CVE-2025-3464 · Network & remote access · ASUS · reported by 54bf65a7-a193-42d2-b1ba-8e150d3c35e1High 8.4
A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of-check Time-of-use issue, potentially leading to authentication bypass. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
- Product
- Armoury Crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comasus.com
Jun 6, 2025A flaw was found in the user's crate for Rust.CVE-2025-5791 · Other software · Red Hat · reported by Red HatHigh 7.1
A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list.
- Product
- Red Hat OpenShift sandboxed containers 1.1
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.comaccess.redhat.com
May 29, 2025Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a CVE-2024-12224 · Other software · servo · reported by security@mozilla.orgMedium 5.1
Improper Validation of Unsafe Equivalence in punycode by the idna crate from Servo rust-url allows an attacker to create a punycode hostname that one part of a system might treat as distinct while another part of that system would treat as equivalent to another hostname.
- Product
- rust-url
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.mozilla.orgrustsec.org
May 23, 2025In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for groupCVE-2025-48756 · Other software · maboroshinokiseki · reported by MITRELow 2.9
In group_number in the scsir crate 0.2.0 for Rust, there can be an overflow because a hardware device may expect a small number of bits (e.g., 5 bits) for group number.
- Product
- scsir
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 23, 2025In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).CVE-2025-48755 · Other software · blyssprivacy · reported by MITRELow 2.9
In the spiral-rs crate 0.2.0 for Rust, allocation can be attempted for a ZST (zero-sized type).
- Product
- sdk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 23, 2025In the memory_pages crate 0.1.0 for Rust, division by zero can occur.CVE-2025-48754 · Other software · FractalFir · reported by MITRELow 2.9
In the memory_pages crate 0.1.0 for Rust, division by zero can occur.
- Product
- memory_pages
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 23, 2025In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock.CVE-2025-48753 · Other software · obsidiandynamics · reported by MITRELow 2.9
In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock.
- Product
- anode
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 23, 2025In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked.CVE-2025-48752 · Other software · Forestryks · reported by MITRELow 2.9
In the process-sync crate 0.2.2 for Rust, the drop function lacks a check for whether the pthread_mutex is unlocked.
- Product
- process-sync-rs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 23, 2025The process_lock crate 0.1.0 for Rust allows data races in unlock.CVE-2025-48751 · Other software · tickbh · reported by MITRELow 2.9
The process_lock crate 0.1.0 for Rust allows data races in unlock.
- Product
- ProcessLock
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 13, 2025In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free thatCVE-2025-4574 · Other software · Red Hat · reported by Red HatMedium 6.5
In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.
- Product
- Red Hat Directory Server 11
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
May 12, 2025A stack buffer overflow has been identified in the AsIO3.sys driver.CVE-2025-1533 · Network & remote access · ASUS · reported by 54bf65a7-a193-42d2-b1ba-8e150d3c35e1High 8.2
A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (BSOD) or other potentially undefined execution. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
- Product
- Armoury Crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordasus.comtalosintelligence.com
May 9, 2025lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.CVE-2025-47737 · Other software · Geal · reported by MITRELow 2.9
lib.rs in the trailer crate through 0.1.2 for Rust mishandles allocating with a size of zero.
- Product
- trailer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 9, 2025dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.CVE-2025-47736 · Other software · gwenn · reported by MITRELow 2.9
dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.
- Product
- libsql-sqlite3-parser
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 9, 2025inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization.CVE-2025-47735 · Other software · Nugine · reported by MITRELow 2.9
inner::drop in inner.rs in the wgp crate through 0.2.0 for Rust lacks drop_slow thread synchronization.
- Product
- wgp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 2, 2025In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an inCVE-2024-58253 · Other software · CasualX · reported by MITRELow 2.9
In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion that produces an invalid value.
- Product
- obfstr
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 23, 2025A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion.CVE-2024-12957 · Network & remote access · ASUS · reported by 54bf65a7-a193-42d2-b1ba-8e150d3c35e1High 8.4
A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion. Refer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
- Product
- Armoury Crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 7, 2025A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP_KEY to achieve remote command execution on the server by manipulaCVE-2024-55556 · Other software · reported by MITRECritical 9.8
A vulnerability in Crater Invoice allows an unauthenticated attacker with knowledge of the APP_KEY to achieve remote command execution on the server by manipulating the laravel_session cookie, exploiting arbitrary deserialization through the encrypted session data. The exploitation vector of this vulnerability relies on an attacker obtaining Laravel's secret APP_KEY, which would allow them to decrypt and manipulate session cookies (laravel_session) containing serialized data. By altering this data and re-encrypting it with the APP_KEY, the attacker could trigger arbitrary deserialization on the server, potentially leading to remote command execution (RCE). The vulnerability is primarily exploited by accessing an exposed cookie and manipulating it using the secret key to gain malicious access to the server.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsynacktiv.com
Nov 5, 2024The cap-std project is organized around the eponymous `cap-std` crate, and develops libraries to make it easy to write capability-based code.CVE-2024-51756 · Other software · bytecodealliance · reported by GitHubLow 2.3
The cap-std project is organized around the eponymous `cap-std` crate, and develops libraries to make it easy to write capability-based code. cap-std's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to the special device filenames which use superscript digits, such as "COM¹", "COM²", "LPT⁰", "LPT¹", and so on. Untrusted filesystem paths could bypass the sandbox and access devices through those special device filenames with superscript digits, and through them provide access peripheral devices connected to the computer, or network resources mapped to those devices. This can include modems, printers, network printers, and any other device connected to a serial or parallel port, including emulated USB serial ports. The bug is fixed in #371, which is published in cap-primitives 3.4.1, cap-std 3.4.1, and cap-async-std 3.4.1. There are no known workarounds for this issue. Affected Windows users are recommended to upgrade.
- Product
- cap-std
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorden.wikipedia.orggithub.com
Sep 6, 2024`gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions.CVE-2024-45405 · Other software · Byron · reported by GitHubMedium 6
`gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions. Prior to version 0.10.11, `gix-path` runs `git` to find the path of a configuration file associated with the `git` installation, but improperly resolves paths containing unusual or non-ASCII characters, in rare cases enabling a local attacker to inject configuration leading to code execution. Version 0.10.11 contains a patch for the issue. In `gix_path::env`, the underlying implementation of the `installation_config` and `installation_config_prefix` functions calls `git config -l --show-origin` to find the path of a file to treat as belonging to the `git` installation. Affected versions of `gix-path` do not pass `-z`/`--null` to cause `git` to report literal paths. Instead, to cover the occasional case that `git` outputs a quoted path, they attempt to parse the path by stripping the quotation marks. The problem is that, when a path is quoted, it may change in substantial ways beyond the concatenation of quotation marks. If not reversed, these changes can result in another valid path that is not equivalent to the original. On a single-user system, it is
- Product
- gitoxide
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 2, 2024gix-path is a crate of the gitoxide project dealing with git paths and their conversions.CVE-2024-45305 · Other software · Byron · reported by GitHubLow 2.5
gix-path is a crate of the gitoxide project dealing with git paths and their conversions. `gix-path` executes `git` to find the path of a configuration file that belongs to the `git` installation itself, but mistakenly treats the local repository's configuration as system-wide if no higher scoped configuration is found. In rare cases, this causes a less trusted repository to be treated as more trusted, or leaks sensitive information from one repository to another, such as sending credentials to another repository's remote. In `gix_path::env`, the underlying implementation of the `installation_config` and `installation_config_prefix` functions calls `git config -l --show-origin` and parses the first line of the output to extract the path to the configuration file holding the configuration variable of highest scope. It is believed to be very difficult to exploit this vulnerability deliberately, due to the need either to anticipate a situation in which higher-scoped configuration variables would be absent, or to arrange for this to happen. Although any operating system may be affected, users running Apple Git on macOS are much less likely to be affected. This issue has been addressed
- Product
- gitoxide
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 12, 2024An OS command injection vulnerability in the ccm_debug component of MIPC Camera firmware prior to v5.4.1.240424171021 allows attackers within the same network tCVE-2024-39091 · Other software · annke · reported by MITREHigh 8.8
An OS command injection vulnerability in the ccm_debug component of MIPC Camera firmware prior to v5.4.1.240424171021 allows attackers within the same network to execute arbitrary code via a crafted HTML request.
- Product
- crater_2_firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordjoerngermany.github.io
Jul 23, 2024Exposure of temporary credentials in logs in Apache Arrow Rust Object Store (`object_store` crate), version 0.10.1 and earlier on all platforms using AWS WebIdeCVE-2024-41178 · Websites & servers · Apache Software Foundation · reported by security@apache.orgHigh 7.5
Exposure of temporary credentials in logs in Apache Arrow Rust Object Store (`object_store` crate), version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWithWebIdentity https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithWebIdentity.html . This allows someone with access to the logs to impersonate that identity, including performing their own calls to AssumeRoleWithWebIdentity, until the OIDC token expires. Typically OIDC tokens are valid for up to an hour, although this will vary depending on the issuer. Users are recommended to use a different AWS authentication mechanism, disable logging or upgrade to version 0.10.2, which fixes this issue. Details: When using AWS WebIdentityTokens with the object_store crate, in the event of a failure and automatic retry, the underlying reqwest error, including the full URL with the credentials, potentially in the parameters, is written to the logs. Thanks to Paul Hatcherian for reporting this vulnerability
- Product
- Apache Arrow Rust Object Store
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comlists.apache.org
Jun 13, 2024CrateDB is a distributed SQL database.CVE-2024-37309 · Other software · crate · reported by GitHubMedium 5.3
CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint (port 4200) permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameters during an ongoing TLS session. This flaw could lead to excessive consumption of CPU resources, resulting in potential server overload and service disruption. The vulnerability was confirmed using an openssl client where the command `R` initiates renegotiation, followed by the server confirming with `RENEGOTIATING`. This vulnerability allows an attacker to perform a denial of service attack by exhausting server CPU resources through repeated TLS renegotiations. This impacts the availability of services running on the affected server, posing a significant risk to operational stability and security. TLS 1.3 explicitly forbids renegotiation, since it closes a window of opportunity for an attack. Version 5.7.2 of CrateDB contains the fix for the issue.
- Product
- crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 14, 2024The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust.CVE-2024-34353 · Other software · matrix-org · reported by GitHubMedium 5.5
The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side `key backup` stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides a redundant copy in case all devices are lost. The key backup uses asymmetric cryptography, with each server-side key backup assigned a unique public-private key pair. Due to a logic bug introduced in commit 71136e44c03c79f80d6d1a2446673bc4d53a2067, matrix-sdk-crypto version 0.7.0 will sometimes log the private part of the backup key pair to Rust debug logs (using the `tracing` crate). This issue has been resolved in matrix-sdk-crypto version 0.7.1. No known workarounds are available.
- Product
- matrix-sdk-crypto
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 30, 2024CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time.CVE-2024-24565 · Other software · crate · reported by GitHubMedium 5.7
CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and authenticated attackers can use the COPY FROM function to import arbitrary file content into database tables, resulting in information leakage. This vulnerability is patched in 5.3.9, 5.4.8, 5.5.4, and 5.6.1.
- Product
- crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 29, 2024CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component.CVE-2023-51982 · Other software · Cratedb · reported by MITRECritical 9.8
CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a specific value and accessing the Admin UI directly using the default user identity.(https://github.com/crate/crate/issues/15231)
- Product
- Cratedb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 18, 2024ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requestsCVE-2023-5716 · Network & remote access · ASUS · reported by twcert@cert.org.twCritical 9.8
ASUS Armoury Crate has a vulnerability in arbitrary file write and allows remote attackers to access or modify arbitrary files by sending specific HTTP requests without permission.
- Product
- Armoury Crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Oct 29, 2023/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an imagCVE-2023-46865 · Other software · Craterapp · reported by MITREHigh 7.2
/api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.
- Product
- Crater
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 21, 2023The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTCVE-2023-43669 · Other software · Snapview · reported by MITREHigh 7.5
The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted (e.g., thousands of times) and the average amount of data for each parse attempt (e.g., millions of bytes).
- Product
- Tungstenite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.combugzilla.suse.com
Aug 3, 2023A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries.CVE-2023-3766 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 5.9
A vulnerability was discovered in the odoh-rs rust crate that stems from faulty logic during the parsing of encrypted queries. This issue specifically occurs when processing encrypted query data received from remote clients and enables an attacker with knowledge of this vulnerability to craft and send specially designed encrypted queries to targeted ODOH servers running with odoh-rs. Upon successful exploitation, the server will crash abruptly, disrupting its normal operation and rendering the service temporarily unavailable.
- Product
- odoh-rs
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 26, 2023ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes withCVE-2023-26911 · Network & remote access · Asus · reported by MITREHigh 7.8
ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.
- Product
- Armoury Crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordirradiate.com.auirradiate.com.au
Jun 21, 2023The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs.CVE-2023-33289 · Other software · Urlnorm Project · reported by MITREHigh 7.5
The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of URLs is not a CVE."
- Product
- Urlnorm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Jun 12, 2023The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issueCVE-2023-33290 · Other software · Git-url-parse Project · reported by MITREHigh 7.5
The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issue to CVE-2023-32758 (Python).
- Product
- Git-url-parse
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 5, 2023The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML documentCVE-2023-34411 · Other software · XML Library Project · reported by MITREHigh 7.5
The xml-rs crate before 0.8.14 for Rust and Crab allows a denial of service (panic) via an invalid <! token (such as <!DOCTYPEs/%<!A nesting) in an XML document. The earliest affected version is 0.8.9.
- Product
- XML Library
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 15, 2023ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software prodCVE-2022-42455 · Network & remote access · Asus · reported by MITREHigh 7.8
ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local users can gain privileges.
- Product
- Armoury Crate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 9, 2023The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs.CVE-2023-22895 · Other software · Bzip2 Project · reported by MITREHigh 7.5
The bzip2 crate before 0.4.4 for Rust allow attackers to cause a denial of service via a large file that triggers an integer overflow in mem.rs. NOTE: this is unrelated to the https://crates.io/crates/bzip2-rs product.
- Product
- Bzip2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 13, 2022In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from.CVE-2022-23523 · Other software · rust-vmm · reported by GitHubMedium 4
In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the `linux-loader` crate entering an infinite loop if the ELF header of the kernel they are loading was modified in a malicious manner. This issue has been addressed in 0.8.1. The issue can be mitigated by ensuring that only trusted kernel images are loaded or by verifying that the headers do not point beyond the end of the file.
- Product
- linux-loader
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 28, 2022Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link.CVE-2022-38699 · Network & remote access · ASUS · reported by twcert@cert.org.twMedium 5.9
Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privilege can modify the log file property to a symbolic link that points to arbitrary system file, causing the logging function to overwrite the system file and disrupt the system.
- Product
- Armoury Crate Service
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtwcert.org.twtwcert.org.tw
Apr 14, 2022SWHKD 1.1.5 consumes the keyboard events of unintended users.CVE-2022-27817 · Other software · Waycrate · reported by MITREMedium 4.4
SWHKD 1.1.5 consumes the keyboard events of unintended users. This could potentially cause an information leak, but is usually a denial of functionality.
- Product
- Swhkd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comopenwall.com
Apr 14, 2022SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option.CVE-2022-27814 · Other software · Waycrate · reported by MITRELow 3.3
SWHKD 1.1.5 allows arbitrary file-existence tests via the -c option.
- Product
- Swhkd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comopenwall.com
Apr 6, 2022SWHKD 1.1.5 allows unsafe parsing via the -c option.CVE-2022-27819 · Other software · Waycrate · reported by MITREMedium 5.3
SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service (memory exhaustion) upon an attempt to parse a large or infinite file (such as a block or character device).
- Product
- Swhkd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comgithub.com
Apr 6, 2022SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname.CVE-2022-27818 · Other software · Waycrate · reported by MITRECritical 9.1
SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service.
- Product
- Swhkd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comgithub.com
Mar 29, 2022SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname.CVE-2022-27816 · Other software · Waycrate · reported by MITREHigh 7.1
SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service.
- Product
- Swhkd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comgithub.com
Mar 29, 2022SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname.CVE-2022-27815 · Other software · Waycrate · reported by MITREHigh 7.8
SWHKD 1.1.5 unsafely uses the /tmp/swhkd.pid pathname. There can be an information leak or denial of service.
- Product
- Swhkd
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comgithub.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.