5893 matches found
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ufshcdmcqreqtohwq function in the drivers/ufs/core/ufs-mcq.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...
F2FS Heap Buffer Overflow DoS
The vulnerability of the f2fshandlecriticalerror function in the fs/f2fs/super.c module of the F2FS file system in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux kernel Ice Reset Buffer Overflow DoS
The vulnerability of the icereset VF function in the drivers/net/ethernet/intel/ice/ice VFlib.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Incorrect Synchronization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Synchronization due to improper access control mechanisms. An attacker can view and delete any files by directly calling specific API endpoints without needing administrative privileges. This is onl...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the freeepfback function in the drivers/usb/gadget/function/uaudio.c file of the Linux kernel’s USB driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2024-7598: Concurrent Execution using Shared Resource with Improper Synchronization
A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies ...
Linux intel vbtn notify_handler buffer overflow DoS
The vulnerability of the notifyhandler function in the drivers/platform/x86/intel/vbtn.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-30235: Concurrent Execution using Shared Resource with Improper Synchronization
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled...
Synology Drive Server SQL injection vulnerability
Synology Drive Server is a collaborative office suite from China-based Synology. The product includes document management, collaborative office and file synchronization and backup features. A SQL injection vulnerability exists in Synology Drive Server versions prior to 3.0.4-12699, prior to...
Linux physical layer network support driver Heap Buffer Overflow DoS
The vulnerability of the at8031parsedt function in the drivers/net/phy/at803x.c module of the Linux PHY driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
RLSA-2025:0324 Important: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...
[SECURITY] Fedora 42 Update: nextcloud-31.0.0-1.fc42
NextCloud gives you universal access to your files through a web interface or WebDAV. It also provides a platform to easily view & sync your contacts, calendars and bookmarks across all your devices and enables basic editing rig ht on the web. NextCloud is extendable via a simple but powerful API...
Citrix Virtual Apps and Desktops 2402 CU2 expired certificate
Citrix Virtual Apps and Desktops CVAD 2402 LTSR Cumulative Update 2 CU2 2402.0.2100 contains installers and binaries signed with a now-expired code signing certificate. File signatures are considered valid if either: A timestamp was included at the time of signing, or The certificate used for...
Siemens SCALANCE X-200RNA Switch Devices Concurrent Execution using Shared Resource with Improper Synchronization (CVE-2015-3196)
ssl/s3clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service race condition and double free via a crafted...
UBUNTU-CVE-2024-58087
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix racy issue from session lookup and expire Increment the session reference count within the lock for lookup to avoid racy issue with session expire...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the idpfprobe function in Intel network adapter drivers drivers/net/ethernet/intel/idpf/idpfmain.c in Linux operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause servi...
PT-2025-10933
Name of the Vulnerable Software and Affected Versions: a2rocklobster FTP Sync versions n/d through 1.1.6 Description: The issue affects the FTP synchronization functionality, allowing for Stored XSS due to a Cross-Site Request Forgery CSRF vulnerability. Recommendations: For versions n/d through...
ALSA-2025:2600 Moderate: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...
Moderate: rsync security update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...
kernel: x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Keep xfdstate in sync with MSRIA32XFD The Linux kernel CVE team has assigned CVE-2024-35801 to this issue. Upstream advisory: https://lore.kernel.org/linux-cve-announce/2024051738-CVE-2024-35801-8038@gregkh/T...