ZeroHour

Vulnerabilities

8 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2018-25026
+2 in the same advisory: …25025 …25024
An issue was discovered in the actix-web crate before 0.7.15 for Rust.

An issue was discovered in the actix-web crate before 0.7.15 for Rust. It can add the Send marker trait to an object that cannot be sent between threads safely, leading to memory corruption.

NVD description · AI analysis pending
9.81%
  • actix actix-web
CVE-2021-38512
An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust.

An issue was discovered in the actix-http crate before 3.0.0-beta.9 for Rust. HTTP/1 request smuggling (aka HRS) can occur, potentially leading to credential disclosure.

NVD description · AI analysis pending
7.52% PoC
  • actix actix-http
  • actix fedora
CVE-2020-35902
An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust.

An issue was discovered in the actix-codec crate before 0.3.0-beta.1 for Rust. There is a use-after-free in Framed.

NVD description · AI analysis pending
9.82% PoC
  • actix actix-codec
CVE-2020-35901
An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust.

An issue was discovered in the actix-http crate before 2.0.0-alpha.1 for Rust. There is a use-after-free in BodyStream.

NVD description · AI analysis pending
7.51% PoC
  • actix actix-http
CVE-2020-35899
An issue was discovered in the actix-service crate before 1.0.6 for Rust.

An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.

NVD description · AI analysis pending
5.5<1% PoC
  • actix actix-service
CVE-2020-35898
An issue was discovered in the actix-utils crate before 2.0.0 for Rust.

An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data.

NVD description · AI analysis pending
9.11% PoC
  • actix actix-utils