2021

The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user wa

Several AJAX actions available in the Workreap WordPress theme before 2.2.2 lacked CSRF protections, as well as allowing

drivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-boun

net/sunrpc/xdr.c in the Linux kernel before 5.13.4 allows remote attackers to cause a denial of service (xdr_set_page_ba

This affects the package open-graph before 0.2.6. The function parse could be tricked into adding or modifying propertie

An issue was discovered in the prost-types crate before 0.8.0 for Rust. An overflow can occur during conversion from Tim

An issue was discovered in the generic-array crate before 0.13.3 for Rust. It violates soundness by using the arr! macro

An issue was discovered in the heapless crate before 0.6.1 for Rust. The IntoIter Clone implementation clones an entire

An issue was discovered in the multiqueue crate through 2020-12-25 for Rust. There are unconditional implementations of

An issue was discovered in the syncpool crate before 0.1.6 for Rust. There is an unconditional implementation of Send fo

An issue was discovered in the noise_search crate through 2020-12-10 for Rust. There are unconditional implementations o

An issue was discovered in the model crate through 2020-11-10 for Rust. The Shared data structure has an implementation

An issue was discovered in the dces crate through 2020-12-09 for Rust. The World type is marked as Send but lacks bounds

An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult<T, E>, there is an implementati

An issue was discovered in the lever crate before 0.1.1 for Rust. AtomicBox<T> implements the Send and Sync traits for a

An issue was discovered in the toolshed crate through 2020-11-15 for Rust. In CopyCell<T>, the Send trait lacks bounds o

An issue was discovered in the slock crate through 2020-11-17 for Rust. Slock<T> unconditionally implements Send and Syn

An issue was discovered in the parc crate through 2020-11-14 for Rust. LockWeak<T> has an unconditional implementation o

An issue was discovered in the scottqueue crate through 2020-11-15 for Rust. There are unconditional implementations of

An issue was discovered in the rcu_cell crate through 2020-11-14 for Rust. There are unconditional implementations of Se

An issue was discovered in the bunch crate through 2020-11-12 for Rust. There are unconditional implementations of Send

An issue was discovered in the kekbit crate before 0.3.4 for Rust. For ShmWriter<H>, Send is implemented without requiri

An issue was discovered in the cache crate through 2020-11-24 for Rust. There are unconditional implementations of Send

An issue was discovered in the v9 crate through 2020-12-18 for Rust. There is an unconditional implementation of Sync fo

An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations

An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard<

An issue was discovered in the beef crate before 0.5.0 for Rust. beef::Cow has no Sync bound on its Send trait.

An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox<T> with no re

An issue was discovered in the libsbc crate before 0.1.5 for Rust. For Decoder<R>, it implements Send for any R: Read.

An issue was discovered in the ticketed_lock crate before 0.3.0 for Rust. There are unconditional implementations of Sen

An issue was discovered in the tiny_future crate before 0.4.0 for Rust. Future<T> does not have bounds on its Send and S

An issue was discovered in the conqueue crate before 0.4.0 for Rust. There are unconditional implementations of Send and

An issue was discovered in the unicycle crate before 0.7.1 for Rust. PinSlab<T> and Unordered<T, S> do not have bounds o

An issue was discovered in the ruspiro-singleton crate before 0.4.1 for Rust. In Singleton, Send and Sync do not have bo

An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requi

GNU cpio through 2.13 allows attackers to execute arbitrary code via a crafted pattern file, because of a dstring.c ds_f

Roxy-WI through 5.2.2.0 allows command injection via /app/funct.py and /api/api_funct.py.

Roxy-WI through 5.2.2.0 allows authenticated SQL injection via select_servers.

In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when ma

Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP address octet, which (in

In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untru

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sens

OpenStack Keystone 10.x through 16.x before 16.0.2, 17.x before 17.0.1, 18.x before 18.0.1, and 19.x before 19.0.1 allow

A vulnerability was found in CIR 2000 / Gestionale Amica Prodigy v1.7. The Amica Prodigy's executable "RemoteBackup.Serv

Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain pr

A permission issue in the Cohesity Linux agent may allow privilege escalation in version 6.5.1b to 6.5.1d-hotfix10, 6.6.

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Mitsubishi Electric MELSEC iQ-R series Safet

SQL Injection vulnerability in Naviwebs Navigate CMS 2.9 via the quicksearch parameter in \lib\packages\comments\comment