Lucene search
+L

1054 matches found

Positive Technologies
Positive Technologies
•added 2021/10/14 12:00 a.m.•15 views

PT-2021-4740

Name of the Vulnerable Software and Affected Versions Mac OS affected versions not specified Description The issue is related to a module for displaying web pages in WebKit, which is part of the Mac OS operating system family. It involves the possibility of concurrent execution using a shared...

7.1CVSS5.7AI score0.01135EPSS
SaveExploits2References31
BDU FSTEC
BDU FSTEC
•added 2021/10/05 12:00 a.m.•15 views

The vulnerability in the `net/sctp/socket.c` component of the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the net/sctp/socket.c component in the Linux operating system arises from the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS6.7AI score0.00475EPSS
SaveExploits1References36Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/09/30 12:00 a.m.•13 views

The vulnerability in the kernel of Apple’s operating systems—Mac OS, iOS, iPadOS, watchOS, and tvOS—allows attackers to escalate their privileges.

The vulnerability in the kernel of Apple’s operating systems—Mac OS, iOS, iPadOS, watchOS, and tvOS—is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.8AI score0.02222EPSS
SaveExploits1References7Affected Software5
Positive Technologies
Positive Technologies
•added 2021/09/20 12:00 a.m.•21 views

PT-2021-8093 · Samba +8 · Samba +8

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource due to incorrect metadata handling. This allows an authenticated attacker with permissions to read or modify sha...

9.8CVSS6.7AI score0.7717EPSS
SaveExploits15References179
CNNVD
CNNVD
•added 2021/09/05 12:00 a.m.•17 views

Huawei HarmonyOS 竞争条件问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition issue vulnerability exists in Huawei HarmonyOS, which arises from improper handling of concurrent accesses when a component of the...

4.3CVSS5.2AI score0.00353EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/09/03 12:00 a.m.•17 views

The vulnerability of Mozilla Maintenance Service allows attackers to escalate their privileges on Firefox ESR and Firefox browsers.

The vulnerability of the Mozilla Maintenance Service affects Firefox ESR and Firefox browsers due to synchronization errors when using a common resource. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS7.4AI score0.00209EPSS
SaveExploits0References6Affected Software4
RedHat Linux
RedHat Linux
•added 2021/08/24 10:01 a.m.•28 views

hw: improper isolation of shared resources in some Intel Processors

Microcode misconfiguration in some Intel processors may cause EIBRS mitigation CVE-2017-5715 to be incomplete. As a consequence, this issue may allow an authenticated user to potentially enable information disclosure via local access...

6.5CVSS6.6AI score0.74041EPSS
SaveExploits10References4
RedHat Linux
RedHat Linux
•added 2021/08/17 8:33 a.m.•19 views

hw: improper isolation of shared resources in some Intel Processors

Microcode misconfiguration in some Intel processors may cause EIBRS mitigation CVE-2017-5715 to be incomplete. As a consequence, this issue may allow an authenticated user to potentially enable information disclosure via local access...

6.5CVSS6.6AI score0.74041EPSS
SaveExploits10References4
GitLab Advisory Database
GitLab Advisory Database
•added 2021/08/13 12:00 a.m.•54 views

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Bouncy Castle BC Java before 1.66, BC C .NET before 1.8.7, BC-FJA before 1.0.1.2, 1.0.2.1, and BC-FNA before 1.0.1.1 have a timing issue within the EC math library that can expose information about the private key when an attacker is able to observe timing information for the generation of multip...

5.9CVSS6.7AI score0.01522EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/07/20 12:00 a.m.•26 views

The vulnerability of the FortiSandbox threat detection and mitigation system, related to synchronization errors when using a shared resource, allows a perpetrator to trigger a service failure.

The vulnerability of the FortiSandbox threat detection and mitigation system arises from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to cause service interruptions...

6.3CVSS5.9AI score0.00503EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/07/13 12:00 a.m.•18 views

The vulnerability of the ManageOne data center management system, caused by synchronization errors when using a shared resource, allows a hacker to trigger a service failure.

The vulnerability of the ManageOne data center management system arises from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS5.5AI score0.00114EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2021/07/09 7:15 p.m.•31 views

Race condition

A concurrent execution using shared resource with improper synchronization 'race condition' in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands...

6.3CVSS5.4AI score0.00503EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2021/07/09 6:26 p.m.•18 views

CVE-2020-29014

A concurrent execution using shared resource with improper synchronization 'race condition' in the command shell of FortiSandbox before 3.2.2 may allow an authenticated attacker to bring the system into an unresponsive state via specifically orchestrated sequences of commands...

6.3CVSS7.2AI score0.00503EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/06/30 12:00 a.m.•16 views

Vulnerability of the wrapUserThread function in AudioStream.cpp in the Android operating system, allowing a hacker to escalate their privileges

The vulnerability of the wrapUserThread function in AudioStream.cpp in the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS7AI score0.00093EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•14 views

The vulnerability of the IBM DB2 database management system, caused by synchronization errors when using a shared resource, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM DB2 database management system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.2CVSS6.5AI score0.0025EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•9 views

The vulnerability of the IBM DB2 database management system, caused by synchronization errors when using a shared resource, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM DB2 database management system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.2CVSS6.5AI score0.00246EPSS
SaveExploits0References4Affected Software2
RedHat Linux
RedHat Linux
•added 2021/06/09 1:13 a.m.•9 views

hw: improper isolation of shared resources in some Intel Processors

Microcode misconfiguration in some Intel processors may cause EIBRS mitigation CVE-2017-5715 to be incomplete. As a consequence, this issue may allow an authenticated user to potentially enable information disclosure via local access...

6.5CVSS6.6AI score0.74041EPSS
SaveExploits10References4
BDU FSTEC
BDU FSTEC
•added 2021/05/12 12:00 a.m.•20 views

The vulnerability of Web Render components in the Firefox web browser allows a hacker to execute arbitrary code within the system.

The vulnerability of Web Render components in the Firefox web browser arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system...

10CVSS7.7AI score0.00736EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2021/05/05 12:00 a.m.•13 views

The vulnerability of the Thunderbird email client, caused by synchronization errors when using a shared resource, allows attackers to circumvent existing security restrictions.

The vulnerability of the Thunderbird email client arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

7.8CVSS6.5AI score0.00286EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/04/06 12:00 a.m.•17 views

The vulnerability in the implementation of the usbip_sockfd_store function in Linux kernel allows a hacker to induce a service failure.

The vulnerability in the implementation of the usbipsockfdstore function in Linux operating system kernels is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS6.6AI score0.00258EPSS
SaveExploits0References25Affected Software2
Rows per page
Query Builder