CVE Vulnerability Database
Search and browse 394,603 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
18,322 records from 2020Clear filters
- CVE-2020-35885Critical 9.8Dec 31, 2020An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation.
- CVE-2020-35884Medium 6.5Dec 31, 2020An issue was discovered in the tiny_http crate through 2020-06-16 for Rust. HTTP Request smuggling can occur via a malformed Transfer-Encoding header.
- CVE-2020-35883Critical 9.1Dec 31, 2020An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename.
- CVE-2020-35882High 8.1Dec 31, 2020An issue was discovered in the rocket crate before 0.4.5 for Rust. LocalRequest::clone creates more than one mutable references to the same object, possibly causing a data race.
- CVE-2020-35881Critical 9.8Dec 31, 2020An issue was discovered in the traitobject crate through 2020-06-01 for Rust. It has false expectations about fat pointers, possibly causing memory corruption in, for example, Rust 2.x.
- CVE-2020-35880Critical 9.8Dec 31, 2020An issue was discovered in the bigint crate through 2020-05-07 for Rust. It allows a soundness violation.
- CVE-2020-35879Critical 9.8Dec 31, 2020An issue was discovered in the rulinalg crate through 2020-02-11 for Rust. There are incorrect lifetime-boundary definitions for RowMut::raw_slice and RowMut::raw_slice_mut.
- CVE-2020-35878Critical 9.8Dec 31, 2020An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of the dropping of uninitialized memory.
- CVE-2020-35877Critical 9.8Dec 31, 2020An issue was discovered in the ozone crate through 2020-07-04 for Rust. Memory safety is violated because of out-of-bounds access.
- CVE-2020-35876Critical 9.8Dec 31, 2020An issue was discovered in the rio crate through 2020-05-11 for Rust. A struct can be leaked, allowing attackers to obtain sensitive information, cause a use-after-free, or cause a data race.
- CVE-2020-35875High 7.5Dec 31, 2020An issue was discovered in the tokio-rustls crate before 0.13.1 for Rust. Excessive memory usage may occur when data arrives quickly.
- CVE-2020-35874High 8.1Dec 31, 2020An issue was discovered in the internment crate through 2020-05-28 for Rust. ArcIntern::drop has a race condition and resultant use-after-free.
- CVE-2020-35873Critical 9.8Dec 31, 2020An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because sessions.rs has a use-after-free.
- CVE-2020-35872Critical 9.8Dec 31, 2020An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via the repr(Rust) type.
- CVE-2020-35871High 8.1Dec 31, 2020An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API data race.
- CVE-2020-35870Critical 9.8Dec 31, 2020An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via an Auxdata API use-after-free.
- CVE-2020-35869Critical 9.8Dec 31, 2020An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated because rusqlite::trace::log mishandles format strings.
- CVE-2020-35868Critical 9.8Dec 31, 2020An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via UnlockNotification.
- CVE-2020-35867Critical 9.8Dec 31, 2020An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via create_module.
- CVE-2020-35866Critical 9.8Dec 31, 2020An issue was discovered in the rusqlite crate before 0.23.0 for Rust. Memory safety can be violated via VTab / VTabCursor.
- CVE-2020-35865High 7.5Dec 31, 2020An issue was discovered in the os_str_bytes crate before 2.0.0 for Rust. It has false expectations about char::from_u32_unchecked behavior.
- CVE-2020-35864High 7.5Dec 31, 2020An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks.
- CVE-2020-35863Critical 9.8Dec 31, 2020An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interface.
- CVE-2020-35862Critical 9.8Dec 31, 2020An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free.
- CVE-2020-35861High 7.5Dec 31, 2020An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys.