Lucene search
K

3907 matches found

Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.4 views

PT-2023-1315 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions prior to 1.29.3 Description: The issue is related to errors in synchronization when using a shared resource in Deno, a runtime for JavaScript and TypeScript. This could allow a remote attacker to execute arbitrary code...

10CVSS7.5AI score0.00601EPSS
Exploits1References9
BDU FSTEC
BDU FSTEC
added 2023/01/13 12:0 a.m.6 views

The vulnerability in the implementation of the Secure Socket Tunneling Protocol (SSTP) on Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Microsoft Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted...

8.1CVSS8AI score0.01084EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/01/13 12:0 a.m.2 views

The vulnerability in the implementation of the Secure Socket Tunneling Protocol (SSTP) on Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Microsoft Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created SSTP...

8.1CVSS8AI score0.01084EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/01/13 12:0 a.m.4 views

PT-2025-13328 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0-rc6+ Description: A synchronization issue exists in the Linux kernel's fscache module. The freeing of a relinquished volume wakes up pending volume acquisition using wake up bit, but this is mismatched wit...

7.8CVSS7.3AI score0.00253EPSS
Exploits0References127
Rockylinux
Rockylinux
added 2023/01/12 8:25 a.m.18 views

rsync bug fix and enhancement update

An update is available for rsync. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsync utility enables the users to copy and synchronize files locally or...

1.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/01/10 12:0 a.m.3 views

The vulnerability of the nmreq_copyin() function in the netmap component of FreeBSD allows a hacker to execute arbitrary code.

The vulnerability of the nmreqcopyin function in the netmap component of FreeBSD operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code within the kernel context...

8.2CVSS7.9AI score0.00243EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-1131 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Installer component of Windows operating systems. This can allow an attacker to eleva...

7CVSS8.8AI score0.00275EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.2 views

PT-2023-1026 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

8.1CVSS8.5AI score0.01084EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.2 views

PT-2023-1129 · Microsoft · Event Tracing For Windows +1

Name of the Vulnerable Software and Affected Versions: Event Tracing for Windows affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Event Tracing service for Microsoft Windows operating systems. This can allow an attacke...

4.7CVSS8.7AI score0.00396EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.2 views

PT-2023-1139 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows GDI component. This can allow an attacker to elevate their privileges. The vulnerability affect...

7CVSS8.1AI score0.00448EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.5 views

PT-2023-1228 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a synchronization error, specifically a "race condition," in the Overlay Filter component of Windows operating systems. This can allow an attacker to gain unauthoriz...

4.7CVSS9.1AI score0.00873EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.3 views

PT-2023-1159 · Microsoft · Windows Bluetooth Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Driver affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Bluetooth driver of Microsoft Windows operating systems. This can allow an attacker to...

7CVSS8.9AI score0.00564EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2023/01/10 12:0 a.m.2 views

PT-2023-1065 · Microsoft · Windows Malicious Software Removal Tool

Name of the Vulnerable Software and Affected Versions: Windows Malicious Software Removal Tool affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Malicious Software Removal Tool MSRT, which can allow an attacker to eleva...

6.3CVSS8.3AI score0.00378EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/01/09 12:0 a.m.2 views

PT-2025-13355

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns data corruption on vram allocated by svm if initialization is not complete and an application is writing to the memory. To resolve this, a sync has been added after...

7.8CVSS6.5AI score0.00206EPSS
Exploits0References113
CNNVD
CNNVD
added 2023/01/02 12:0 a.m.26 views

ansible-ntp 安全漏洞

ansible-ntp is managing time synchronization, NTP servers and time zones. A security vulnerability exists in ansible-ntp that stems from insufficient control over the amount of network messages...

4.3CVSS4.8AI score0.00399EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.5 views

Vulnerability of the kcm_tx_work() function (net/kcm/kcmsock.c) in Linux operating system kernels, allowing a hacker to execute arbitrary code

The vulnerability of the kcmtxwork function net/kcm/kcmsock.c in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7AI score0.00218EPSS
Exploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.3 views

The vulnerability of the XFRM subsystem in the Linux operating system allows a hacker to execute arbitrary code, cause a service failure, or otherwise affect the system.

The vulnerability of the XFRM subsystem in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or have other adverse effects on the system...

7CVSS7.1AI score0.002EPSS
Exploits0References44Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.6 views

The vulnerability of the pipe_resize_ring function in Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the piperesizering function in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7AI score0.00361EPSS
Exploits0References23Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.5 views

The vulnerability in the driver/char/pcmcia/scr24x_cs.c component of Linux kernel allows a hacker to execute arbitrary code.

The vulnerability in the drivers/char/pcmcia/scr24xcs.c component of Linux kernel systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

6.4CVSS7.3AI score0.003EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/12/19 12:0 a.m.3 views

The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting registration service in Windows operating systems is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.2AI score0.003EPSS
Exploits0References3
Rows per page
Query Builder