5874 matches found
Siemens APE1808 Improper Restriction of Communication Channel to Intended Endpoints (CVE-2025-22251)
An improper restriction of communication channel to intended endpoints vulnerability CWE-923 in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to inject unauthorized sessions via crafted FGSP session synchronization...
PT-2026-28889
Уязвимость контроллера доставки приложений NetScaler ADC ранее Citrix ADC и системы контроля доступа к виртуальной среде NetScaler Gateway ранее Citrix Gateway связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему...
Siemens SIMATIC S7-1500 Improper Locking (CVE-2025-38058)
In the Linux kernel, the following vulnerability has been resolved: legitimizemnt: check for MNTSYNCUMOUNT should be under mountlock ... or we risk stealing final mntput from sync umount - raising mntcount after umount2 has verified that victim is not busy, but before it has set MNTSYNCUMOUNT; in...
PT-2026-51914
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during Translation Lookaside Buffer TLB synchronization, which is a process used to maintain consistency between the CPU cache and the main memory page tables. Th...
CVE-2026-22163 GPU DDK - Unsafe writing of MMU PT entries on systems with 32-bit host CPU
Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...
CVE-2026-22163: Missing Synchronization
Requires malware code to misuse the DDK kernel module IOCTL interface. Such code can use the interface in an unsupported way that allows subversion of the GPU to perform writes to arbitrary physical memory pages. The product utilises a shared resource in a concurrent manner but does not attempt t...
SUSE CVE-2026-23247
In the Linux kernel, the following vulnerability has been resolved: tcp: secureseq: add back ports to TS offset This reverts 28ee1b746f49 "secureseq: downgrade to per-host timestamp offsets" tcptwrecycle went away in 2017. Zhouyan Deng reported off-path TCP source port leakage via SYN cookie...
Linux NVME Kernel Driver Heap Buffer Overflow DoS
The vulnerability of the nvmefccreateassociation function in the drivers/nvme/host/fc.c file of the Linux kernel’s NVME driver is related to the lack of synchronization. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Ceph driver Data Compromise
The vulnerabilities of the functions mdscshow, cephunlink, cephopen, and cephmdscreleaserequest in the Linux kernel’s distributed file system support for Ceph are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise the...
Linux block-core Heap Buffer Overflow DoS
The vulnerability of the biopoll function in the block/blk-core.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer dereferencing due to poor synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-23247 tcp: secure_seq: add back ports to TS offset
In the Linux kernel, the following vulnerability has been resolved: tcp: secureseq: add back ports to TS offset This reverts 28ee1b746f49 "secureseq: downgrade to per-host timestamp offsets" tcptwrecycle went away in 2017. Zhouyan Deng reported off-path TCP source port leakage via SYN cookie...
Linux kernel sysctl Heap Buffer Overflow DoS
The vulnerability of the procdou8vecminmax function in the Linux kernel/sysctl.c module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux embedded processor subsystem Heap Buffer Overflow DoS
The vulnerabilities of the functions imxdsprprocstop and imxdsprprocvqwork in the driver module remoteproc/imxdsprproc.c of the Linux operating system’s embedded processor subsystem are related to the lack of synchronization. Exploiting these vulnerabilities could allow an attacker to cause a...
Linux kernel io-uring Heap Buffer Overflow DoS
The vulnerability of the createioworker function in the iouring/io-wq.c module, a component of the Linux kernel’s asynchronous input/output interface, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
Linux block-mq Kernel DoS
The vulnerability of the blkmqmarktagwait function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel InfiniBand Heap Buffer Overflow DoS
The vulnerability of the mlx5revokemr function in the drivers/infiniband/hw/mlx5/mr.c file of the Linux kernel’s InfiniBand support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
AMD DRI GPU Function Heap Overflow DoS
The vulnerability of the dcwakeandexecutedmubcmdlist function in the drivers/gpu/drm/amd/display/dc/dcdmubsrv.c driver, which is part of the DRI support driver for AMD graphics cards in Linux operating systems, leads to synchronization errors when using shared resources. Exploiting this...
CVE-2026-25772
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...
EUVD-2026-12621
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...
CVE-2026-25772
Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.14.3, a stack-based buffer overflow vulnerability exists in the Wazuh Database synchronization module wdbdeltaevent.c. The SQL query construction logic...