Lucene search
+L

1054 matches found

BDU FSTEC
BDU FSTEC
•added 2022/06/07 12:00 a.m.•17 views

Microsoft Edge’s vulnerability, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

8.3CVSS7.4AI score0.01895EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/06/06 12:00 a.m.•21 views

The vulnerability of the DNS Server component of the Windows operating system, related to synchronization errors when using a shared resource (“Race Situation”), allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

8.5CVSS7.3AI score0.01744EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/06 12:00 a.m.•17 views

The vulnerability of the DNS Server component of the Windows operating system, related to synchronization errors when using a shared resource (“Race Situation”), allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.03839EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/03 12:00 a.m.•17 views

The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.3AI score0.01929EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/06/03 12:00 a.m.•16 views

The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.3AI score0.01929EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/05/31 12:00 a.m.•8 views

PT-2022-2879 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Microsoft Edge. It may allow a remote attacker to elevate their privileges...

8.3CVSS6.5AI score0.01895EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2022/05/26 12:00 a.m.•20 views

The vulnerability of the chown_one() function in the initialization subsystem and systemd service management allows a attacker to increase their privileges.

The vulnerability of the chownone function in the system initialization and systemd service management subsystem is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.01058EPSS
SaveExploits5References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/05/26 12:00 a.m.•10 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, caused by synchronization errors when using a common resource, allows a hacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit arises due to synchronization errors when using a common resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code upon processing malicious web content...

7.6CVSS7.5AI score0.0167EPSS
SaveExploits0References12Affected Software11
Github Security Blog
Github Security Blog
•added 2022/05/24 4:51 p.m.•56 views

Concurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch

A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user...

5.9CVSS6.2AI score0.01008EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2022/05/17 5:47 a.m.•74 views

GHSA-HW4G-FHCP-X5MQ Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or ...

8.7CVSS7.4AI score0.02294EPSS
SaveExploits0References15
Github Security Blog
Github Security Blog
•added 2022/05/17 5:47 a.m.•62 views

Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or ...

4.3CVSS4AI score0.02294EPSS
SaveExploits0References14Affected Software1
Github Security Blog
Github Security Blog
•added 2022/05/17 4:59 a.m.•47 views

Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS6.8AI score0.01256EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/05/17 4:59 a.m.•82 views

GHSA-4644-HG35-55M9 Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS6.4AI score0.01256EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2022/05/17 12:00 a.m.•17 views

The vulnerability of the AWS VPN Client service, related to synchronization errors when using a shared resource, allows a perpetrator to escalate their privileges or cause a service failure.

The vulnerability of the AWS VPN Client is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

7.3CVSS6.5AI score0.01466EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/05/12 12:00 a.m.•19 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.1AI score0.04724EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2022/05/12 12:00 a.m.•20 views

The vulnerability of the Windows Digital Media Receiver component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Digital Media Receiver component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.3AI score0.00435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•4 views

PT-2022-2596 · Microsoft · Windows Point-To-Point Tunneling Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Tunneling Protocol versions affected versions not specified Description: The issue is related to the implementation of the Point-to-Point Tunneling Protocol PPTP in Windows operating systems, specifically concerning...

9.3CVSS9.6AI score0.79347EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•9 views

PT-2022-2645 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource, specifically a "race condition" in the Storage Spaces Direct feature of the Microsoft Windows operating syste...

7CVSS7.3AI score0.00578EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•9 views

PT-2022-2535 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, caused by synchronization errors when using a shared resource. This could allow an attacker to...

7CVSS9.3AI score0.05089EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2022/05/10 12:00 a.m.•13 views

PT-2022-2446 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows operating system, specifically concerning the Advanced Local Procedure Call ALPC handler. It involves...

7CVSS9.3AI score0.04724EPSS
SaveExploits0References7
Rows per page
Query Builder