Lucene search
K

3907 matches found

Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.3 views

PT-2023-3924 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows DNS Server component. This can allow a remote attacker to execute arbitrary code. The...

6.8CVSS9.6AI score0.00608EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.2 views

PT-2023-3926 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows DNS Server component. It allows a remote attacker to execute arbitrary code...

6.8CVSS9.5AI score0.00608EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.2 views

PT-2023-3925 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows DNS Server component. It allows a remote attacker to execute arbitrary code...

6.8CVSS9.5AI score0.00608EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2023/07/11 12:0 a.m.2 views

The vulnerability of the IPv6 protocol implementation in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the IPv6 protocol implementation in Linux operating systems is related to uncontrolled resource consumption during the processing of hash tables. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending numerous SYN requests...

5.7CVSS6.5AI score0.00507EPSS
Exploits0References21Affected Software8
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.3 views

PT-2023-3660 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows operating system. It allows an attacker to elevate privileges in the system. This is an...

7CVSS9.2AI score0.00421EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.6 views

PT-2023-3568 · Microsoft +7 · Visual Studio +8

Name of the Vulnerable Software and Affected Versions: ASP.NET and Visual Studio affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the .NET platform and Microsoft Visual Studio. This can allow a remote attacker to bypass...

9.8CVSS6.4AI score0.99999EPSS
Exploits19References199
BDU FSTEC
BDU FSTEC
added 2023/07/10 12:0 a.m.2 views

The vulnerability of the alarm() and siglongjmp() functions in the command-line utility cURL allows a hacker to trigger a service failure.

The vulnerability of the alarm and siglongjmp functions in the command-line utility cURL is related to improper synchronization during the resolution of host names. Exploiting this vulnerability can allow a remote attacker to cause service failures...

5.9CVSS6.5AI score0.02658EPSS
Exploits1References11Affected Software7
NVD
NVD
added 2023/07/03 5:15 p.m.25 views

CVE-2023-34451

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time ...

8.2CVSS7.9AI score0.00742EPSS
Exploits1References3
Prion
Prion
added 2023/07/03 5:15 p.m.18 views

Code injection

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. The mempool maintains two data structures to keep track of outstanding transactions: a list and a map. These two data structures are supposed to be in sync all the time ...

6.4CVSS7.8AI score0.00742EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/06/30 12:0 a.m.2 views

MISP 安全漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.172, which stems from the incorrect...

7.5CVSS7.3AI score0.00444EPSS
Exploits1References4
Citrix
Citrix
added 2023/06/27 12:0 a.m.5 views

[NetScaler] Service State doesn't sync to Secondary node in HA setup

When you build NetScaler HA pair with VPX on SDX platform. You may observe the issue that Primary doesn't sync service UP/DOWN events to Secondary node. The issue can impact SDX platforms:SDX 8900, SDX 15000, SDX 15000-50G, SDX 26000, and SDX 26000-50S...

7.1AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/06/21 12:0 a.m.2 views

The vulnerability of the Windows Filtering Platform, a system for filtering data on Windows operating systems, allows attackers to increase their privileges.

The vulnerability of the Windows Filtering Platform in the operating system Windows is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.2AI score0.00372EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/06/20 12:0 a.m.3 views

The vulnerability of the Windows Bus Filter driver in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Bus Filter driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS7.2AI score0.0028EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/06/19 12:0 a.m.2 views

PT-2025-53065

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc6-btrfs-next-134+ Description The Linux kernel contained a flaw in the btrfs subsystem related to the handling of free space tree deletion. Specifically, the code lacked proper synchronization when removi...

4.6CVSS6.5AI score0.00166EPSS
Exploits0
Fedora
Fedora
added 2023/06/16 2:22 a.m.31 views

[SECURITY] Fedora 38 Update: syncthing-1.23.5-1.fc38

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

5.4CVSS7AI score0.00778EPSS
Exploits1
Fedora
Fedora
added 2023/06/16 2:15 a.m.16 views

[SECURITY] Fedora 37 Update: syncthing-1.23.5-1.fc37

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

5.4CVSS7AI score0.00778EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.3 views

The vulnerability of the B.A.T.M.A.N. network interface in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the B.A.T.M.A.N. network interface in the Linux operating system is related to incorrect synchronization between the processes of removing network devices and executing delayed tasks in the batadvdatstarttimer function within the distributedarptable.c module. Exploiting this...

8.1CVSS5.5AI score
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.3 views

The vulnerability of the Grafana data visualization web tool, related to synchronization errors, allows attackers to trigger a service failure.

The vulnerability of the Grafana data visualization web tool is related to synchronization errors when using publicly accessible information panels. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.8AI score0.00745EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/06/16 12:0 a.m.12 views

Fedora 38 : syncthing (2023-39eb10ec3c)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-39eb10ec3c advisory. Update to version 1.23.5. Addresses CVE-2022-46165. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

5.4CVSS5.7AI score0.00778EPSS
Exploits1References2
OSV
OSV
added 2023/06/15 7:15 p.m.3 views

CVE-2023-21130

In btmbleperiodicadvsynclost of btmblegap.cc, there is a possible remote code execution due to a buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID...

9.8CVSS6.7AI score0.00529EPSS
Exploits0References1
Rows per page
Query Builder