Lucene search
+L

4221 matches found

Github Security Blog
Github Security Blog
added 2024/01/10 9:30 a.m.29 views

Apache Answer Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

3.1CVSS7.2AI score0.00891EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/01/10 9:30 a.m.59 views

GHSA-F899-4MR4-FQPV Apache Answer Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

3.1CVSS3.6AI score0.00891EPSS
SaveExploits0References4
NVD
NVD
added 2024/01/10 9:15 a.m.27 views

CVE-2023-49619

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

3.1CVSS4AI score0.00891EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/10 9:15 a.m.19 views

Race condition

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

2.1CVSS7.1AI score0.00891EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/01/10 8:25 a.m.20 views

CVE-2023-49619 Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

3.1CVSS6AI score
SaveExploits0References4
Cvelist
Cvelist
added 2024/01/10 8:25 a.m.36 views

CVE-2023-49619 Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

4.3AI score0.00891EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.4 views

PT-2024-1024 · Microsoft · Ocsp +1

Name of the Vulnerable Software and Affected Versions: Microsoft Online Certificate Status Protocol OCSP affected versions not specified Description: The issue is related to the implementation of the Online Certificate Status Protocol OCSP in Windows operating systems, specifically concerning...

7.1CVSS9.6AI score0.01408EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.4 views

PT-2024-1149 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client versions prior to 1.2.5105 Description: The issue is related to errors in synchronization when using a shared resource in the Remote Desktop Protocol RDP of the Windows operating system. This can allow a remote attacker ...

7.6CVSS9.7AI score0.01979EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.5 views

PT-2024-1247 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Hyper-V hardware virtualization system. This can be exploited by a remote attacker to...

7.5CVSS9.5AI score0.0395EPSS
SaveExploits0References22
Veracode
Veracode
added 2024/01/05 10:27 a.m.20 views

Race Condition

Audited is vulnerable to Race Condition. The vulnerability is caused due lack of proper synchronization mechanisms during the use of Thread.current. This potentially leads to logging of wrong username in an audit log...

3.1CVSS6.7AI score0.00494EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2024/01/02 6:15 a.m.45 views

CVE-2023-33094

Memory corruption while running VK synchronization with KASAN enabled...

8.4CVSS8.7AI score0.00119EPSS
SaveExploits0References1
Prion
Prion
added 2024/01/02 6:15 a.m.29 views

Memory corruption

Memory corruption while running VK synchronization with KASAN enabled...

4.3CVSS7.5AI score0.00119EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/01/02 5:38 a.m.10 views

CVE-2023-33094 Use After Free in Linux Graphics

Memory corruption while running VK synchronization with KASAN enabled...

8.4CVSS8.6AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
added 2024/01/02 5:38 a.m.125 views

CVE-2023-33094

CVE-2023-33094 is a memory corruption issue occurring during VK synchronization with KASAN enabled in Qualcomm-related components (Display). The NVD entry lists a local attack vector with low privileges required and no user interaction, with a high impact on confidentiality, integrity, and availa...

8.4CVSS7.8AI score0.00119EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/02 5:38 a.m.52 views

CVE-2023-33094 Use After Free in Linux Graphics

Memory corruption while running VK synchronization with KASAN enabled...

8.4CVSS8.8AI score0.00119EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/01/02 12:0 a.m.13 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when running VK synchronization with KASAN enabled...

8.4CVSS6.9AI score0.00119EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/01/01 12:0 a.m.8 views

PT-2024-12403 · Unknown · Linux Graphics

Name of the Vulnerable Software and Affected Versions: Linux Graphics affected versions not specified Description: The issue is related to memory corruption that occurs while running VK synchronization with KASAN enabled. This problem is also described as a Use-After-Free UAF in Linux Graphics. N...

8.4CVSS6.8AI score0.00119EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/27 12:0 a.m.5 views

PT-2025-32442

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: This issue resolves a timeout error occurring in the Bluetooth btnxpuart driver during power save stress testing. The problem arises when the power save mechanism activates UART break...

5.5CVSS5.9AI score0.00127EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.8 views

The vulnerability of the update loader for the Plantronics Hub application, which allows a hacker to elevate their privileges.

The vulnerability of the application update downloader for controlling audio device settings in Plantronics Hub is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow attackers to increase their privileges...

8.8CVSS5.5AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/19 12:0 a.m.6 views

The vulnerability of the Scheduled Backups function in the Nagios XI monitoring tool allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Scheduled Backups function in the Nagios XI monitoring tool is related to synchronization errors when using a shared resource during port scanning. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

3.3CVSS5.5AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder