Lucene search
K

3907 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.3 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01535EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.4 views

The vulnerability of the Linux operating system’s kernel memory management subsystem, which allows attackers to increase their privileges

The vulnerability of the Linux operating system’s kernel memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS6.7AI score0.009EPSS
Exploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.3 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS8AI score0.01226EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/10 12:0 a.m.5 views

The vulnerability of the Connected Devices Platform Service (CDPSvc) in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Connected Devices Platform Service CDPSvc for Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.7CVSS6.4AI score0.00414EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.3 views

PT-2022-4404 · Hewlett Packard · Hp Laptop Bios

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the System Management Mode SMM implementation of the HP laptop BIOS firmware. This could allow an...

7CVSS8.4AI score0.00138EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.3 views

PT-2022-4088 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Hyper-V hardware virtualization system. It may allow an attacker to execute arbitrary code ...

7.8CVSS8.3AI score0.00319EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.2 views

PT-2022-4278 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in th...

8.1CVSS8.3AI score0.01578EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.2 views

PT-2022-4277 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in th...

8.1CVSS8.3AI score0.01424EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.2 views

PT-2022-4124 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in th...

8.1CVSS8.8AI score0.01535EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.2 views

PT-2022-4122 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

8.1CVSS8.3AI score0.01226EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.1 views

PT-2022-4421 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

8.1CVSS8.3AI score0.01226EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/08/09 12:0 a.m.2 views

PT-2022-4267 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

8.1CVSS8.8AI score0.01424EPSS
Exploits0References7
Code423n4
Code423n4
added 2022/08/06 12:0 a.m.11 views

block.timestamp used as time proxy

Lines of code Vulnerability details block.timestamp used as time proxy Summary: Risk of using block.timestamp for time should be considered. Details: block.timestamp is not an ideal proxy for time because of issues with synchronization, miner manipulation and changing block times. This can be...

7AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/08/04 12:0 a.m.4 views

PT-2022-6792 · Red Hat +6 · 389-Ds-Base +7

Name of the Vulnerable Software and Affected Versions: 389-ds-base affected versions not specified Description: A flaw in the Content Synchronization plugin of 389 Directory Server allows an authenticated attacker to cause a denial of service by exploiting a NULL pointer dereference using a...

7.5CVSS6AI score0.08426EPSS
Exploits4References103
BDU FSTEC
BDU FSTEC
added 2022/08/04 12:0 a.m.5 views

The vulnerability of the fromData method implementation in the October CMS system allows a perpetrator to execute arbitrary code.

The vulnerability of the fromData method implementation in October CMS is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

8.1CVSS7.8AI score0.01136EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/02 12:0 a.m.4 views

The implementation of the wchp/wchc command in the centralized service for managing configuration information, naming, distributed synchronization, and providing group services via Apache ZooKeeper is vulnerable. This vulnerability stems from the lack of authentication for the critical function, allowing a malicious actor operating remotely to cause service failures.

The vulnerability of the wchp/wchc command implementation in the centralized service for managing configuration information, naming, distributed synchronization, and providing group services in Apache ZooKeeper is related to the lack of authentication for the critical function. Exploiting this...

7.8CVSS7.2AI score0.73654EPSS
Exploits0References12Affected Software7
Fedora
Fedora
added 2022/07/31 1:37 a.m.16 views

[SECURITY] Fedora 36 Update: syncthing-1.20.3-2.fc36

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

2AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/07/29 12:0 a.m.2 views

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.3AI score0.00818EPSS
Exploits0References3
Virtuozzo
Virtuozzo
added 2022/07/27 12:0 a.m.23 views

[Important] [Security] Virtuozzo ReadyKernel patch 144.1 for Virtuozzo Hybrid Server 7.0, 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.x. NOTE: No more updates are planned for the kernels 3.10.0-1127.8.2.vz7.158.8 and 3.10.0-1127.18.2.vz7.163.46. Vulnerability id: VSTOR-55377...

1.4AI score
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/07/26 12:0 a.m.2 views

The vulnerability of Intel SSD microprogramming software lies in the simultaneous execution using a shared resource with improper synchronization, which allows a hacker to cause service failure.

The vulnerability of Intel SSD microprogramming software is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS5.7AI score0.00147EPSS
Exploits0References3
Rows per page
Query Builder