6458 matches found
Design/Logic Flaw
A security vulnerability originally reported in the SYNC2101 product, and applicable to specific sub-families of SYNC devices, allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access to...
CVE-2021-44564
The CVE-2021-44564 issue affects Kalkitech Sync SYNC2101/Sync family devices where management communications between Easyconnect and the SYNC device are performed over an unsecured channel. Root cause: insecure communication channel used by the administration tool, enabling attackers with network...
Kalkitech Sync Products 加密问题漏洞
Kalkitech Sync Products is a range of substation gateways from Kalkitech India. Kalkitech Sync Products suffers from an encryption issue vulnerability that stems from the use of an insecure communication channel by the management tools Easyconnect and SYNC devices, which can be exploited by an...
PT-2022-12161
Name of the Vulnerable Software and Affected Versions SYNC devices affected versions not specified Description A security issue allows an attacker to download the configuration file used in the device and apply a modified configuration file back to the device. The attack requires network access t...
PT-2025-8056
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the pm runtime get sync function increases the runtime PM counter even when it returns an error, potentially leading to a refcount...
PT-2025-8245
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue has been identified in the Linux kernel, specifically in the rtw joinbss event prehandle function. This occurs due to a lock being held by one thread while another threa...
PT-2025-8243
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock occurs in the rtw surveydone event callback function. The issue arises when the system holds the pmlmepriv-lock and calls del timer sync to wait for a timer to stop, while the...
PT-2021-8083 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the incorrect initialization of dev-work after calling input register device in the appletouch component of the Linux kernel. This may cause a warning in flush...
CVE-2021-45704
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
CVE-2021-45704
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
CVE-2021-45704
CVE-2021-45704 affects the Rust metrics-util crate prior to 0.7.0. The issue is a data race and potential memory corruption caused by AtomicBucket unconditionally implementing Send/Sync, which allows concurrent access to inner data that may not be Sync. Public advisories (Red Hat, OSV, GitHub, CN...
CVE-2021-45704: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the metrics-util crate before 0.7.0 for Rust. There is a data race and memory corruption because AtomicBucket unconditionally implements the Send and Sync traits...
[SECURITY] Fedora 34 Update: calibre-4.23.0-8.fc34
Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...
Microsoft Azure Defender for IoT sync Endpoint SQL Injection Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft Azure Defender for IoT. Authentication is not required to exploit this vulnerability. The specific flaw exists within the sync endpoint. The issue results from the lack of proper validation ...
A crafted NTFS image can cause an out-of-bounds access in ntfs_inode_sync_standard_information in NTFS-3G < 2021.8.22.
...
Azure File Sync Agent v14.1 Release – November 2021 (KB5001873)
Update for Azure File Sync agent version 14.1.0.0. For more details, see the associated Microsoft Knowledge Base article...
Privilege Escalation
github.com/couchbase/syncgateway is vulnerable to privilege escalation. The vulnerability exists because of storage of bucket credentials in the metadata within sync documents written to the bucket, allowing a user with read privilege to perform write access to data in Couchbase Server. Note: Thi...
Azure File Sync Agent v14.1 Release – November 2021 (KB5001873)
Update for Azure File Sync agent version 14.1.0.0. For more details, see the associated Microsoft Knowledge Base article...