RU
Product
rust
24
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 11Medium 6Low 0
Watch
Add rust to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-24576 | 10.0 | Apr 9 | Rust is a programming language Affected: before 1.77.2 |
| CVE-2024-3566 | 9.8 | Apr 10 | A command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific… Affected: before 1.77.2 |
| CVE-2021-31162 | 9.8 | Apr 14 | In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics Affected: 1.48.0 before 1.52.0 |
| CVE-2021-28879 | 9.8 | Apr 11 | In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow Affected: before 1.52.0 |
| CVE-2020-36318 | 9.8 | Apr 11 | In the standard library in Rust before 1.49.0, VecDeque::make_contiguous has a bug that pops the same element more than once under certain condition Affected: 1.48.0 before 1.49.0 |
| CVE-2018-1000810 | 9.8 | Oct 8 | The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 contains a CWE-680: Integer Overflow to Buffer Overflow… Affected: 1.26.0; 1.26.1; 1.26.2; 1.27.0; 1.27.1; 1.27.2; +2 more |
| CVE-2021-29922 | 9.1 | Aug 7 | library/std/src/net/parser.rs in Rust before 1.53.0 does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations)… Affected: before 1.53.0 |
Showing 7