Lucene search
+L

154 matches found

Redos
Redos
added 2026/03/04 12:0 a.m.8 views

ROS-20260304-73-0003

A vulnerability in the etsqdiscchange function of the netsched component of the Linux kernel is related to simultaneous execution using a shared resource with incorrect synchronization. Exploitation of the vulnerability allows an attacker to cause a denial of service...

7CVSS7.3AI score0.00126EPSS
Exploits0
Cvelist
Cvelist
added 2026/02/25 8:36 p.m.34 views

CVE-2026-25959 FreeRDP has heap-use-after-free in xf_cliprdr_provide_data_

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.23.0, xfcliprdrprovidedata passes freed pDstData to XChangeProperty because the cliprdr channel thread calls xfcliprdrserverformatdataresponse which converts and uses the clipboard data without holding any lock,...

6.9CVSS0.00567EPSS
Exploits1References9
Snyk
Snyk
added 2026/02/17 9:27 p.m.4 views

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition in which maps from multiple components may be accessed without synchronization. When under heavy concurrent activity, either spontaneous or attacker-generated, the process can be caused to panic and crash with fatal error...

7.5CVSS5.5AI score0.00291EPSS
Exploits1References2
CNNVD
CNNVD
added 2026/02/09 12:0 a.m.7 views

FreeRDP 资源管理错误漏洞

FreeRDP is an open-source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. Versions of FreeRDP prior to 3.22.0 contained a resource management vulnerability. This vulnerability stemmed from the use of ainputsendinputevent to cache channelcallback in local variables, which...

8.7CVSS7.1AI score0.00467EPSS
Exploits0References2
Redos
Redos
added 2026/01/20 12:0 a.m.6 views

ROS-20260120-73-0004

A vulnerability in the ipcmsgsendrequest function of the fs/smb/server/transportipc.c module of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

8.1CVSS6.5AI score0.00352EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.5 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004062)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004062 advisory. A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop. Tenable has...

7CVSS6.2AI score0.01026EPSS
Exploits1References12
RedHat Linux
RedHat Linux
added 2026/01/12 1:52 p.m.13 views

kernel: Linux kernel: SCTP use-after-free due to race condition in sendmsg

A flaw was found in the Linux kernel's SCTP implementation. This vulnerability allows a use-after-free read via a race condition during SCTP message sending...

7.8CVSS6.7AI score0.00196EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.4 views

PT-2026-8201

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A use-after-free issue exists in the iscsit dec session usage count function within the SCSI target iSCSI component of the Linux kernel. The function calls complete while holding the...

8.8CVSS6.7AI score0.0024EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.5 views

PT-2025-52989

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc6-btrfs-next-134+ Description The Linux kernel contains a flaw in the btrfs file system related to race conditions when deleting quota roots from the dirty cow roots list. Specifically, when disabling...

6.3AI score0.00172EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2025/12/16 4:16 p.m.6 views

CVE-2025-68287

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3removerequests call paths This patch addresses a race condition caused by unsynchronized execution of multiple call paths invoking dwc3removerequests, leading to premature...

6AI score0.00202EPSS
Exploits0References35
OSV
OSV
added 2025/12/16 2:15 p.m.8 views

UBUNTU-CVE-2025-68207

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbind Cancel and wait for any Dead CT worker to complete before continuing with device unbinding. Else the worker will end up using resources freed by the undind operation. cherry pick...

5.7AI score0.00172EPSS
Exploits0References11
BDU FSTEC
BDU FSTEC
added 2025/12/15 12:0 a.m.3 views

The vulnerability of the NFS kernel component in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the NFS component in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to cause service failures...

5.5CVSS6.6AI score0.00132EPSS
Exploits0References16Affected Software6
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.5 views

Siemens SCALANCE and RUGGEDCOM Devices Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') (CVE-2024-42232)

libceph: fix race between delayedwork and cephmoncstop The way the delayed work is handled in cephmoncstop is prone to races with monfault and possibly also finishhunting. Both of these can requeue the delayed work which wouldn't be canceled by any of the following code in case that happens after...

5.5CVSS6.9AI score0.00226EPSS
Exploits0References4
Redos
Redos
added 2025/11/13 12:0 a.m.7 views

ROS-20251113-05

A vulnerability in the NVIDIA display driver is related to a synchronization issue. Exploitation of the vulnerability could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service, and disclose sensitive information A vulnerability in the NVIDIA display driver ...

8.2CVSS7.5AI score0.00221EPSS
Exploits0
OSV
OSV
added 2025/10/28 5:44 p.m.12 views

CLSA-2025-1761673460 qemu-kvm: Fix of CVE-2024-7409

CVE-2024-7409: fix improper synchronization during socket closure to prevent DoS attack...

7.5CVSS7.1AI score0.01027EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/28 3:48 p.m.3 views

CVE-2025-34294

...

6.5AI score0.00016EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2009-2190

Malware in sbrugna...

4.9CVSS6.1AI score0.00404EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2012-4465

Malware in sbrugna...

2.1CVSS8.5AI score0.00433EPSS
Exploits0References28
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-13789

Malware in sbrugna...

5.9CVSS5.7AI score0.01054EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2011-0257

Malware in sbrugna...

5CVSS6.2AI score0.014EPSS
Exploits0References4
Rows per page
Query Builder