Microsoft Windows Work Folder Service竞争条件问题漏洞

Microsoft Windows Work Folder Service is a Microsoft Corporation USA role service for file servers running Windows Server that provides users with a consistent way to access their work files from their PCs and devices. A competitive conditions issue vulnerability exists in Microsoft Windows Work...

Microsoft DNS Server 竞争条件问题漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. Microsoft DNS Server is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Co...

Microsoft Windows Active Directory 竞争条件问题漏洞

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

Microsoft Hyper-V 竞争条件问题漏洞

Microsoft Windows Hyper-V is an application from Microsoft USA. A system hypervisor virtualization technology that enables desktop virtualization. Microsoft Hyper-V is vulnerable to a competitive conditions issue. The following products and editions are affected:Windows 10 Version 1809 for...

Microsoft Windows ALPC 竞争条件问题漏洞

Microsoft Windows ALPC is an inter-process communication tool for high-speed messaging from Microsoft Corporation USA. A Competing Conditions Issue vulnerability exists in Microsoft Windows ALPC, which can be exploited by a local attacker to elevate privileges on a system...

Microsoft DNS Server 竞争条件问题漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. Microsoft DNS Server is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows Server, version 20H2 Server Core Installation,Windows Server 2016,Windows Server 2016 Server Core...

Microsoft DNS Server 竞争条件问题漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. Microsoft DNS Server is vulnerable to a competitive condition issue. The following products and editions are affected:Windows Server 2008 for 32-bit Systems Service Pack 2 Server Core installation,Windows Server 2008 for x64-based...

Siemens SCALANCE竞争条件问题漏洞

The SCALANCE W-1700 products are IEEE 802.11 compliant wireless communication devices. a denial of service vulnerability exists in the Siemens SCALANCE W-1700 11ac series, which can be exploited by an attacker to cause the entire device to crash for competing conditions...

Microsoft Windows User Profile Service 竞争条件问题漏洞

Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A competitive conditions issue vulnerability exists in Microsoft Windows User Profile Service. The...

PT-2022-17558 · S · S

Name of the Vulnerable Software and Affected Versions: S Secure versions prior to SMR Apr-2022 Release 1 Description: The issue is related to improper access control, allowing physical attackers to access secured data under certain conditions. Recommendations: For versions prior to SMR Apr-2022...

Take other lender loanTicket without improving any of the loan conditions

Lines of code Vulnerability details Impact Take other lender loanTicket without improving any of the loan conditions Proof of Concept The bug is in NftLoanFacilliator.sol in the function lend link1. && previousInterestRate - previousInterestRate requiredImprovementRate / SCALAR = interestRate, fo...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a competitive conditions issue vulnerability that stems from a post-release reuse issue in Offline...

Many Apple products competitive conditions problems vulnerability

Apple iOS is an operating system for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. apple macOS Big Sur is a mobile application app from Apple. apple iPadOS is an operating system for Apple iPadOS is an operating system for the iPad...

CVE-2022-25610

Unauthenticated Stored Cross-Site Scripting XSS in Simple Ajax Chat = 20220115 allows an attacker to store the malicious code. However, the attack requires specific conditions, making it hard to exploit...

CVE-2022-21820

NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity...

PT-2022-15154 · Nvidia · Nvidia Dcgm

Name of the Vulnerable Software and Affected Versions: NVIDIA DCGM affected versions not specified Description: The issue allows a network user to cause detection of error conditions without action, potentially leading to limited code execution, denial of service, escalation of privileges, and...

(Pwn2Own) Netatalk parse_entries Improper Handling of Exceptional Conditions Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parseentries function. The issue results from the lack of proper error handling when parsin...

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

CVE-2022-23040

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...

CVE-2022-23042

Linux PV device frontends vulnerable to attacks by backends This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Several Linux PV device frontends are using the grant table interfaces for removing access rights of the...