Lucene search
+L

4217 matches found

CNNVD
CNNVD
added 2023/01/02 12:0 a.m.29 views

ansible-ntp 安全漏洞

ansible-ntp is managing time synchronization, NTP servers and time zones. A security vulnerability exists in ansible-ntp that stems from insufficient control over the amount of network messages...

4.3CVSS4.8AI score0.00399EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.8 views

The vulnerability of the pipe_resize_ring function in Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the piperesizering function in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7AI score0.00372EPSS
SaveExploits0References23Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.11 views

The vulnerability in the driver/char/pcmcia/scr24x_cs.c component of Linux kernel allows a hacker to execute arbitrary code.

The vulnerability in the drivers/char/pcmcia/scr24xcs.c component of Linux kernel systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

6.4CVSS7.3AI score0.003EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.11 views

Vulnerability of the kcm_tx_work() function (net/kcm/kcmsock.c) in Linux operating system kernels, allowing a hacker to execute arbitrary code

The vulnerability of the kcmtxwork function net/kcm/kcmsock.c in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7AI score0.00228EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.9 views

The vulnerability of the XFRM subsystem in the Linux operating system allows a hacker to execute arbitrary code, cause a service failure, or otherwise affect the system.

The vulnerability of the XFRM subsystem in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or have other adverse effects on the system...

7CVSS7.1AI score0.00202EPSS
SaveExploits0References44Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/12/19 12:0 a.m.16 views

The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting registration service in Windows operating systems is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.2AI score0.003EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.12 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...

8.1CVSS8AI score0.01127EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.14 views

The vulnerability of the DirectX Graphics Kernel Driver (DXGKRNL) on Microsoft Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.5AI score0.00594EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.7 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...

8.1CVSS8AI score0.0107EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/12/13 4:9 p.m.5 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01251EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/12/07 11:55 a.m.7 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01251EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/12/07 12:0 a.m.18 views

PT-2022-7702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the simultaneous execution of commands using a shared resource with incorrect synchronization in the Linux kernel's drm/vmwgfx component. This can lead to a crash...

5.5CVSS6.3AI score0.00225EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/12/07 12:0 a.m.43 views

Amazon Linux 2 : 389-ds-base (ALAS-2022-1879)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1879 advisory. A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL...

6.5CVSS6.7AI score0.01251EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.15 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to enhance their privileges within the system.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

7CVSS7.2AI score0.05382EPSS
SaveExploits0References3
Amazon
Amazon
added 2022/12/06 12:0 a.m.36 views

Medium: 389-ds-base

Issue Overview: A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. CVE-2022-2850 Affected Packages...

6.5CVSS6.7AI score0.01251EPSS
SaveExploits1
Citrix
Citrix
added 2022/12/06 12:0 a.m.10 views

Mac OS input source not synchronized correctly to remote applications or desktops

With Citrix Workspace app for Mac 2212 or previous version on Mac OS 13, you might encounter problems that client input sources cannot be synchronized correctly to your remote applications or desktops. For example, for Mac OS 13, the default English input source is English - ABC, while in the pas...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.9 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.7AI score0.00298EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.6 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01086EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.10 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01184EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.10 views

The vulnerability of Firefox browser, related to synchronization errors when using a common resource, allows attackers to disclose protected information.

The vulnerability of Firefox browsers is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

7.8CVSS7.1AI score0.00391EPSS
SaveExploits0References8Affected Software3
Rows per page
Query Builder