Lucene search
+L

780 matches found

Vulnrichment
Vulnrichment
added 2021/07/09 6:26 p.m.16 views

CVE-2020-29014

A concurrent execution using shared resource with improper synchronization 'race condition' in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands...

6.3CVSS7.2AI score0.00503EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/06/30 12:0 a.m.8 views

Vulnerability of the wrapUserThread function in AudioStream.cpp in the Android operating system, allowing a hacker to escalate their privileges

The vulnerability of the wrapUserThread function in AudioStream.cpp in the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS7AI score0.00093EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.6 views

The vulnerability of the IBM DB2 database management system, caused by synchronization errors when using a shared resource, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM DB2 database management system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.2CVSS6.5AI score0.00239EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.6 views

The vulnerability of the IBM DB2 database management system, caused by synchronization errors when using a shared resource, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM DB2 database management system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.2CVSS6.5AI score0.00236EPSS
SaveExploits0References4Affected Software2
RedHat Linux
RedHat Linux
added 2021/06/09 1:13 a.m.2 views

hw: improper isolation of shared resources in some Intel Processors

Microcode misconfiguration in some Intel processors may cause EIBRS mitigation CVE-2017-5715 to be incomplete. As a consequence, this issue may allow an authenticated user to potentially enable information disclosure via local access...

6.5CVSS6.6AI score0.74207EPSS
SaveExploits10References4
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.9 views

The vulnerability of Web Render components in the Firefox web browser allows a hacker to execute arbitrary code within the system.

The vulnerability of Web Render components in the Firefox web browser arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system...

10CVSS7.7AI score0.0073EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.7 views

The vulnerability of the Thunderbird email client, caused by synchronization errors when using a shared resource, allows attackers to circumvent existing security restrictions.

The vulnerability of the Thunderbird email client arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

7.8CVSS6.5AI score0.00286EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.11 views

The vulnerability in the implementation of the usbip_sockfd_store function in Linux kernel allows a hacker to induce a service failure.

The vulnerability in the implementation of the usbipsockfdstore function in Linux operating system kernels is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS6.6AI score0.00258EPSS
SaveExploits0References25Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.9 views

The vulnerability in the fs/io_uring.c file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/iouring.c file in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00279EPSS
SaveExploits0References20Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.11 views

The vulnerability of the X server component of the SDDM screen manager, related to simultaneous execution using a shared resource with incorrect synchronization, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the X server component of the SDDM screen manager is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data and compromise its integrity...

6.3CVSS6.9AI score0.0042EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.14 views

The vulnerability of the lock_fdc() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the lockfdc function in Linux operating systems is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.6CVSS6.7AI score0.00227EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the Samba networking communication package arises from the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Samba networking communication package is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

7.5CVSS7AI score0.11181EPSS
SaveExploits4References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.7 views

The vulnerability of the device driver update application, Intel Driver and Support Assistant, arises due to synchronization errors when using a shared resource, allowing an attacker to cause a service failure.

The vulnerability of the device driver update application, Intel Driver and Support Assistant, arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause service failure...

5.9CVSS5.5AI score0.00356EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/01/05 12:0 a.m.9 views

Google Android Competitive Conditions Issue Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS suffers from a competitive conditions issue vulnerability that arises from improper handling of concurrent access when concurrent code requires mutually exclusive access ...

4.7CVSS6.3AI score0.00104EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/12/24 12:0 a.m.5 views

The vulnerability of the Ansible configuration management system, related to synchronization errors when using a shared resource, allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Ansible configuration management system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

3.6CVSS7.3AI score0.00345EPSS
SaveExploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.7 views

The vulnerability of Xen hypervisors arises from the simultaneous execution using a shared resource with incorrect synchronization. This “race condition” allows a malicious actor to cause a service failure or increase their privileges.

The vulnerability of Xen hypervisors arises from the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

7CVSS7.2AI score0.00264EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/10/15 12:0 a.m.10 views

The vulnerability of the WildFly application server in Java, caused by synchronization errors when using a shared resource, allows attackers to terminate arbitrary processes in the system.

The vulnerability of the WildFly application server in Java is caused by synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to terminate arbitrary processes in the system by modifying the PID file located at /var/run/jboss-eap/...

5.5CVSS6.2AI score0.0019EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.7 views

The vulnerability of the Apport error registration service arises from insufficient checks on the status of the shared resource. This allows attackers to elevate their privileges and execute arbitrary code.

The vulnerability of the Apport error logging service exists due to insufficient checks on the status of the shared resource. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

7CVSS7.4AI score0.00498EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.9 views

The vulnerability of the `usb_mtp_write_data` function in the Qemu Media Transfer Protocol implementation, an emulator for hardware devices in the QEMU environment, allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the usbmtpwritedata function in the Qemu Media Transfer Protocol implementation, within the QEMU hardware emulation software, arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure or...

7CVSS7.2AI score0.00424EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.4 views

The vulnerability of Cisco AMP, a security tool for protecting against malicious software, and Clam Antivirus, an antivirus protection tool, arises due to synchronization errors when using a common resource. This vulnerability allows a hacker to delete any files they desire.

The vulnerabilities of the Cisco AMP anti-virus protection tool and the Clam Antivirus antivirus tool are caused by synchronization errors when using a common resource. Exploiting these vulnerabilities can allow attackers to delete arbitrary files...

5.5CVSS7.3AI score0.00264EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder