[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-35506":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":48,"related":49,"reserved_at":9,"published_at":61,"modified_at":62,"state":63,"summary":64,"references_raw":73,"kevs":103,"epss":104,"epss_history":107,"metrics":368,"affected":379},"CVE-2020-35506","A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the 'Information Transfer' command (CMD_TI). This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service or potential code execution with the privileges of the QEMU process.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46],{"_key":25},"SUSE-SU-2021:2813-1",{"_key":27},"SUSE-SU-2021:2858-1",{"_key":29},"SUSE-SU-2021:2789-1",{"_key":31},"SUSE-SU-2021:3575-1",{"_key":33},"SUSE-SU-2021:3613-1",{"_key":35},"SUSE-SU-2021:3614-1",{"_key":37},"SUSE-SU-2021:3635-1",{"_key":39},"OPENSUSE-SU-2021:1202-1",{"_key":41},"OPENSUSE-SU-2021:2789-1",{"_key":43},"OPENSUSE-SU-2021:2858-1",{"_key":45},"OPENSUSE-SU-2021:3614-1",{"_key":47},"DEBIAN-CVE-2020-35506",[],[50,51,52,53,54,55,56,57,58,59,60],{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},"2021-05-28T10:20:55.000Z","2024-08-04T17:02:08.237Z","Modified",{"cisa_kev":65,"cisa_ransomware":65,"cisa_vendor":9,"epss_severity":66,"epss_score":67,"severity":68,"severity_score":69,"severity_version":70,"severity_source":71,"severity_vector":72,"severity_status":63},false,"low",0.0003,"medium",6.7,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",[74,82,87,92,97],{"url":75,"sources":76,"tags":78},"http://www.openwall.com/lists/oss-security/2021/04/16/3",[77,71],"cve.org",[79,80,81],"Mailing List","X Refsource MLIST","Third Party Advisory",{"url":83,"sources":84,"tags":85},"https://www.openwall.com/lists/oss-security/2021/04/16/3",[77,71],[86,79,81],"X Refsource MISC",{"url":88,"sources":89,"tags":90},"https://bugzilla.redhat.com/show_bug.cgi?id=1909996",[77,71],[86,91,81],"Issue Tracking",{"url":93,"sources":94,"tags":95},"https://security.netapp.com/advisory/ntap-20210713-0006/",[77,71],[96,81],"X Refsource CONFIRM",{"url":98,"sources":99,"tags":100},"https://security.gentoo.org/glsa/202208-27",[77,71],[101,102,81],"Vendor Advisory","X Refsource GENTOO",[],{"date":105,"score":67,"percentile":106},"2026-06-04",0.09068,[108,111,114,117,120,123,125,128,131,134,137,140,143,146,149,153,156,159,162,165,168,171,174,177,179,182,185,187,190,193,196,199,202,205,208,211,214,217,220,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,287,290,293,295,298,301,304,307,310,313,316,319,322,325,328,331,334,337,340,343,346,348,351,354,356,359,361,363,365],{"date":109,"score":67,"percentile":110},"2025-11-04",0.07482,{"date":112,"score":67,"percentile":113},"2025-11-05",0.07536,{"date":115,"score":67,"percentile":116},"2025-11-06",0.07651,{"date":118,"score":67,"percentile":119},"2025-11-07",0.07679,{"date":121,"score":67,"percentile":122},"2025-11-08",0.07687,{"date":124,"score":67,"percentile":116},"2025-11-09",{"date":126,"score":67,"percentile":127},"2025-11-10",0.07608,{"date":129,"score":67,"percentile":130},"2025-11-11",0.07598,{"date":132,"score":67,"percentile":133},"2025-11-12",0.07578,{"date":135,"score":67,"percentile":136},"2025-11-13",0.07613,{"date":138,"score":67,"percentile":139},"2025-11-14",0.07656,{"date":141,"score":67,"percentile":142},"2025-11-15",0.07711,{"date":144,"score":67,"percentile":145},"2025-11-16",0.07724,{"date":147,"score":67,"percentile":148},"2025-11-17",0.07717,{"date":150,"score":151,"percentile":152},"2025-11-18",0.00097,0.23023,{"date":154,"score":151,"percentile":155},"2025-11-19",0.23034,{"date":157,"score":151,"percentile":158},"2025-11-20",0.23036,{"date":160,"score":67,"percentile":161},"2025-11-21",0.07878,{"date":163,"score":67,"percentile":164},"2025-11-22",0.0787,{"date":166,"score":67,"percentile":167},"2025-11-23",0.07866,{"date":169,"score":67,"percentile":170},"2025-11-24",0.07859,{"date":172,"score":67,"percentile":173},"2025-11-25",0.07856,{"date":175,"score":67,"percentile":176},"2025-11-26",0.07863,{"date":178,"score":67,"percentile":176},"2025-11-27",{"date":180,"score":67,"percentile":181},"2025-11-28",0.07848,{"date":183,"score":67,"percentile":184},"2025-11-29",0.07875,{"date":186,"score":67,"percentile":164},"2025-11-30",{"date":188,"score":67,"percentile":189},"2025-12-01",0.07905,{"date":191,"score":67,"percentile":192},"2025-12-02",0.07922,{"date":194,"score":67,"percentile":195},"2025-12-03",0.07942,{"date":197,"score":67,"percentile":198},"2025-12-04",0.07923,{"date":200,"score":67,"percentile":201},"2025-12-05",0.07939,{"date":203,"score":67,"percentile":204},"2025-12-06",0.07951,{"date":206,"score":67,"percentile":207},"2025-12-07",0.07952,{"date":209,"score":67,"percentile":210},"2025-12-08",0.07949,{"date":212,"score":67,"percentile":213},"2025-12-09",0.08005,{"date":215,"score":67,"percentile":216},"2025-12-10",0.08073,{"date":218,"score":67,"percentile":219},"2025-12-11",0.08125,{"date":221,"score":67,"percentile":219},"2025-12-12",{"date":223,"score":67,"percentile":224},"2025-12-13",0.08092,{"date":226,"score":67,"percentile":227},"2025-12-14",0.08085,{"date":229,"score":67,"percentile":230},"2025-12-15",0.08017,{"date":232,"score":67,"percentile":233},"2025-12-16",0.08041,{"date":235,"score":67,"percentile":236},"2025-12-17",0.08117,{"date":238,"score":67,"percentile":239},"2025-12-18",0.0817,{"date":241,"score":67,"percentile":242},"2025-12-19",0.08149,{"date":244,"score":67,"percentile":245},"2025-12-20",0.08142,{"date":247,"score":67,"percentile":248},"2025-12-21",0.08075,{"date":250,"score":67,"percentile":251},"2025-12-22",0.08027,{"date":253,"score":67,"percentile":254},"2025-12-23",0.08044,{"date":256,"score":67,"percentile":257},"2025-12-24",0.08059,{"date":259,"score":67,"percentile":260},"2025-12-25",0.08137,{"date":262,"score":67,"percentile":263},"2025-12-26",0.08146,{"date":265,"score":67,"percentile":266},"2025-12-27",0.0814,{"date":268,"score":67,"percentile":269},"2025-12-28",0.08145,{"date":271,"score":67,"percentile":272},"2025-12-29",0.08131,{"date":274,"score":67,"percentile":275},"2025-12-30",0.08105,{"date":277,"score":67,"percentile":278},"2025-12-31",0.08134,{"date":280,"score":67,"percentile":281},"2026-01-01",0.08198,{"date":283,"score":67,"percentile":284},"2026-01-02",0.08202,{"date":286,"score":67,"percentile":284},"2026-01-03",{"date":288,"score":67,"percentile":289},"2026-01-04",0.08133,{"date":291,"score":67,"percentile":292},"2026-01-05",0.08084,{"date":294,"score":67,"percentile":216},"2026-01-06",{"date":296,"score":67,"percentile":297},"2026-01-07",0.08106,{"date":299,"score":67,"percentile":300},"2026-01-08",0.08181,{"date":302,"score":67,"percentile":303},"2026-01-09",0.08193,{"date":305,"score":67,"percentile":306},"2026-01-10",0.08221,{"date":308,"score":67,"percentile":309},"2026-01-11",0.08209,{"date":311,"score":67,"percentile":312},"2026-01-12",0.08187,{"date":314,"score":67,"percentile":315},"2026-01-13",0.08159,{"date":317,"score":67,"percentile":318},"2026-01-14",0.08188,{"date":320,"score":67,"percentile":321},"2026-01-15",0.08182,{"date":323,"score":67,"percentile":324},"2026-01-16",0.08206,{"date":326,"score":67,"percentile":327},"2026-01-17",0.08225,{"date":329,"score":67,"percentile":330},"2026-01-18",0.08203,{"date":332,"score":67,"percentile":333},"2026-01-19",0.08163,{"date":335,"score":67,"percentile":336},"2026-01-20",0.08121,{"date":338,"score":67,"percentile":339},"2026-01-21",0.08103,{"date":341,"score":67,"percentile":342},"2026-01-22",0.08078,{"date":344,"score":67,"percentile":345},"2026-01-23",0.08169,{"date":347,"score":67,"percentile":327},"2026-01-24",{"date":349,"score":67,"percentile":350},"2026-01-25",0.08201,{"date":352,"score":67,"percentile":353},"2026-01-26",0.08156,{"date":355,"score":67,"percentile":269},"2026-01-27",{"date":357,"score":67,"percentile":358},"2026-01-28",0.08113,{"date":360,"score":67,"percentile":224},"2026-01-29",{"date":362,"score":67,"percentile":275},"2026-01-30",{"date":364,"score":67,"percentile":278},"2026-01-31",{"date":366,"score":67,"percentile":367},"2026-02-01",0.08154,[369],{"source":71,"cvss_v2_0":370,"cvss_v3_0":9,"cvss_v3_1":375,"cvss_v4_0":9},{"baseScore":371,"baseSeverity":9,"vectorString":372,"impactScore":373,"exploitabilityScore":374},4.6,"AV:L/AC:L/Au:N/C:P/I:P/A:P",6.4,3.9,{"baseScore":69,"baseSeverity":376,"vectorString":72,"impactScore":377,"exploitabilityScore":378},"MEDIUM",9.8,2.1,[380],{"ecosystem":9,"name":381,"vendor":381,"product":381,"cpe_part":382,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":383},"qemu","a",[384],{"version":385,"is_range":386,"range_type":387,"version_start":9,"version_start_type":9,"version_end":388,"version_end_type":389,"fixed_in":9},"lt6.0.0",true,"cpe","6.0.0","excluding"]