Lucene search
K

3907 matches found

BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.5 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...

8.1CVSS8AI score0.01127EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.5 views

The vulnerability of the DirectX Graphics Kernel Driver (DXGKRNL) on Microsoft Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.5AI score0.00594EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.3 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...

8.1CVSS8AI score0.0107EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2022/12/13 4:9 p.m.3 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01238EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2022/12/07 11:55 a.m.4 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01238EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/12/07 12:0 a.m.8 views

PT-2022-7702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the simultaneous execution of commands using a shared resource with incorrect synchronization in the Linux kernel's drm/vmwgfx component. This can lead to a crash...

5.5CVSS6.3AI score0.00225EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.4 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to enhance their privileges within the system.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

7CVSS7.2AI score0.05382EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2022/12/07 12:0 a.m.40 views

Amazon Linux 2 : 389-ds-base (ALAS-2022-1879)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1879 advisory. A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL...

6.5CVSS6.7AI score0.01238EPSS
Exploits1References3
Amazon
Amazon
added 2022/12/06 12:0 a.m.29 views

Medium: 389-ds-base

Issue Overview: A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. CVE-2022-2850 Affected Packages...

6.5CVSS6.7AI score0.01238EPSS
Exploits1
Citrix
Citrix
added 2022/12/06 12:0 a.m.8 views

Mac OS input source not synchronized correctly to remote applications or desktops

With Citrix Workspace app for Mac 2212 or previous version on Mac OS 13, you might encounter problems that client input sources cannot be synchronized correctly to your remote applications or desktops. For example, for Mac OS 13, the default English input source is English - ABC, while in the pas...

7.2AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.2 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01057EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.3 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.7AI score0.003EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.5 views

The vulnerability of Firefox browser, related to synchronization errors when using a common resource, allows attackers to disclose protected information.

The vulnerability of Firefox browsers is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

7.8CVSS7.1AI score0.00391EPSS
Exploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.7 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01152EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2022/11/29 2:5 p.m.2 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01238EPSS
Exploits1References4
Code423n4
Code423n4
added 2022/11/28 12:0 a.m.7 views

Potential PirexReward's producerTokens's rewardToken unsynced with PirexGmx rewardToken can miss calculate the actual reward for user

Lines of code Vulnerability details Impact Potential PirexReward's producerTokens's rewardToken unsynced with PirexGmx rewardToken can miss calculate the actual reward for user Proof of Concept PirexReward initialization does not include rewardToken initialization for producerTokens. Meanwhile...

6.8AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/11/28 12:0 a.m.2 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01057EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/25 12:0 a.m.4 views

The vulnerability of the Point-to-Point Tunneling Protocol in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Point-to-Point Tunneling Protocol lies in synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.3AI score0.00983EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.5 views

The vulnerability of the `flush_to_ldisc` function in the Linux operating system allows a hacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the flushtoldisc function in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failure...

6.3CVSS6.6AI score0.00332EPSS
Exploits1References25Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.3 views

The vulnerability of the Windows operating system’s Bind Filter Driver allows a hacker to gain unauthorized access to the device.

The vulnerability of the Windows operating system’s Bind Filter Driver arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to the device...

7CVSS7.2AI score0.00502EPSS
Exploits0References2
Rows per page
Query Builder