CVE Vulnerability Database
Search and browse 394,625 CVE records with CVSS scores, EPSS exploit predictions, CISA KEV status and whether the Vulnix engine has a detection for them.
18,322 records from 2020Clear filters
- CVE-2020-35917Medium 5.5Dec 31, 2020An issue was discovered in the pyo3 crate before 0.12.4 for Rust. There is a reference-counting error and use-after-free in From<Py<T>>.
- CVE-2020-35916Medium 5.5Dec 31, 2020An issue was discovered in the image crate before 0.23.12 for Rust. A Mutable reference has immutable provenance. (In the case of LLVM, the IR may be always correct.)
- CVE-2020-35915Medium 5.5Dec 31, 2020An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types.
- CVE-2020-35914Medium 4.7Dec 31, 2020An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockWriteGuard unsoundness.
- CVE-2020-35913Medium 4.7Dec 31, 2020An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of RwLockReadGuard unsoundness.
- CVE-2020-35912Medium 4.7Dec 31, 2020An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockWriteGuard unsoundness.
- CVE-2020-35911Medium 4.7Dec 31, 2020An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedRwLockReadGuard unsoundness.
- CVE-2020-35910Medium 5.5Dec 31, 2020An issue was discovered in the lock_api crate before 0.4.2 for Rust. A data race can occur because of MappedMutexGuard unsoundness.
- CVE-2020-35909High 7.5Dec 31, 2020An issue was discovered in the multihash crate before 0.11.3 for Rust. The from_slice parsing code can panic via unsanitized data from a network server.
- CVE-2020-35908Medium 5.5Dec 31, 2020An issue was discovered in the futures-util crate before 0.3.2 for Rust. FuturesUnordered can lead to data corruption because Sync is mishandled.
- CVE-2020-35907Medium 5.5Dec 31, 2020An issue was discovered in the futures-task crate before 0.3.5 for Rust. futures_task::noop_waker_ref allows a NULL pointer dereference.
- CVE-2020-35906High 7.8Dec 31, 2020An issue was discovered in the futures-task crate before 0.3.6 for Rust. futures_task::waker may cause a use-after-free in a non-static type situation.
- CVE-2020-35905Medium 4.7Dec 31, 2020An issue was discovered in the futures-util crate before 0.3.7 for Rust. MutexGuard::map can cause a data race for certain closure situations (in safe code).
- CVE-2020-35904Medium 5.5Dec 31, 2020An issue was discovered in the crossbeam-channel crate before 0.4.4 for Rust. It has incorrect expectations about the relationship between the memory allocation and how many iterator elements there are.
- CVE-2020-35903Medium 5.5Dec 31, 2020An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question.
- CVE-2020-35902Critical 9.8Dec 31, 2020An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed.
- CVE-2020-35901High 7.5Dec 31, 2020An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.
- CVE-2020-35900Medium 5.5Dec 31, 2020An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-free.
- CVE-2020-35899Medium 5.5Dec 31, 2020An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.
- CVE-2020-35898Critical 9.1Dec 31, 2020An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.
- CVE-2020-35851Critical 9.8Dec 31, 2020HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system.
- CVE-2020-35743High 7.6Dec 31, 2020HGiga MailSherlock contains a SQL injection flaw. Attackers can inject and launch SQL commands in a URL parameter of specific cgi pages.
- CVE-2020-35742High 7.6Dec 31, 2020HGiga MailSherlock contains a vulnerability of SQL Injection. Attackers can inject and launch SQL commands in a URL parameter.
- CVE-2020-35741Medium 6.1Dec 31, 2020HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks.
- CVE-2020-35740Medium 6.1Dec 31, 2020HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks.