Google Android 竞争条件问题漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to a contention condition issue that originates in gasketalloccoherentmemory in gasketpagetable.c. A memory corruption due to a contention condition error can be exploited by an attacker to...

snapd competition condition issue vulnerability

Snapd is an open source, cross-platform package management tool. snapd is vulnerable to a contention issue, which can be exploited by local attackers to gain root privileges and execute arbitrary code to gain privilege escalation by binding to mount their own content in snap's private mount...

Atlassian Jira Server ViewInstrumentation.jspa Cross-site Request Forgery Vulnerability

Atlassian Jira Service is the server version of an IT service desk and request tracking system from Atlassian Australia. The Atlassian Jira Server is vulnerable to cross-site request forgery, which stems from an application/secure/admin/ViewInstrumentation.jspa endpoint that does not adequately...

CVE-2021-43953

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings via a Cross-Site Request Forgery CSRF vulnerability in the /secure/admin/ViewInstrumentation.jspa endpoint. The affected versions are befor...

Atlassian Jira Server 和 Data Center 跨站请求伪造漏洞

Atlassian Jira Service is the server version of an IT service desk and request tracking system from Atlassian Australia. The Atlassian Jira Server is vulnerable to cross-site request forgery, which stems from an application/secure/admin/ViewInstrumentation.jspa endpoint that does not adequately...

Huawei HarmonyOS Competitive Conditions Issue Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a conditional contention vulnerability in the binder driver subsystem of the Wearables...

CVE-2021-32036

A flaw was found in the MongoDB database when repeatedly invoking the features command. This flaw allows an authenticated attacker without any specific authorizations to repeatedly invoke commands, leading to resource depletion or the generation of high lock contention...

Huawei HarmonyOS 竞争条件问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a conditional contention vulnerability in the binder driver subsystem of the Wearables...

CVE-2021-32036

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This...

CVE-2021-32036

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This...

CVE-2021-32036

The CVE-2021-32036 entry affects MongoDB Server across multiple branches: v5.0 before and including 5.0.3; v4.4 before and including 4.4.9; v4.2 before and including 4.2.16; v4.0 before and including 4.0.28. An authenticated user without special authorizations can repeatedly invoke the features c...

CVE-2021-32036

Removed by vendor...

MongoDB Server 安全漏洞

MongoDB is a document-oriented database management system from the American company MongoDB. A security vulnerability exists in MongoDB Server, where an authenticated user without any specific authorization may be able to repeatedly invoke features commands, a large number of which may lead to...

Denial of Service and Data Integrity vulnerability in features command

An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions...

Linux kernel competition condition issue vulnerability

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux Kernel is vulnerable to a contention problem that stems from a failure to properly lock operations in btrfs, which can be exploited by an attacker to cause a user to crash the kernel or deadlock t...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux Kernel is vulnerable to a contention problem that stems from a failure to properly lock operations in btrfs, which can be exploited by an attacker to cause a user to crash the kernel or deadlock t...

Red Hat Enterprise Linux 竞争条件问题漏洞

Red Hat Enterprise Linux is a Linux operating system for business users from Red Hat, an American company. A security vulnerability exists in Red Hat Enterprise Linux that stems from a samba:symbolic link contention error could allow metadata to be read and modified outside of exported shares...

Samba 竞争条件问题漏洞

Samba is a standard Windows interoperability suite for Linux and Unix. A post-link vulnerability exists in Samba file server that results from a symbolic link contention condition when creating directories. A remote authenticated user can create a directory on a Unix file system outside of the...

CVE-2021-43953

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to toggle the Thread Contention and CPU monitoring settings via a Cross-Site Request Forgery CSRF vulnerability in the /secure/admin/ViewInstrumentation.jspa endpoint. The affected versions are befor...

Google Android Competitive Conditions Issue Vulnerability (CNVD-2022-01772)

Google Android is a Linux-based open source operating system from Google. A vulnerability exists in the Google Android Kernel for a race condition issue. The vulnerability stems from an out-of-bounds write due to a race condition in synchronousprocessioentries in lwisioctl.c. The vulnerability ca...