Lucene search
K

3891 matches found

Prion
Prion
added 2021/04/14 7:15 a.m.9 views

Race condition

In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions...

4.3CVSS5.9AI score0.0024EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/04/14 7:15 a.m.16 views

CVE-2017-20004

In the standard library in Rust before 1.19.0, there is a synchronization problem in the MutexGuard object. MutexGuards can be used across threads with any types, allowing for memory safety issues through race conditions...

5.9CVSS6.2AI score0.0024EPSS
Exploits0References3
CVE
CVE
added 2021/04/14 6:10 a.m.65 views

CVE-2017-20004

CVE-2017-20004 affects the Rust standard library prior to 1.19.0, where a synchronization flaw in the MutexGuard object allows MutexGuards to be used across threads with arbitrary types, enabling memory-safety issues via data races. Affected component: Rust standard library; vulnerable version ra...

5.9CVSS5.8AI score0.0024EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2021/04/14 6:10 a.m.19 views

CVE-2018-25008

In the standard library in Rust before 1.29.0, there is weak synchronization in the Arc::getmut method. This synchronization issue can be lead to memory safety issues through race conditions...

5.9CVSS5.8AI score0.00213EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/04/14 12:0 a.m.1 views

The vulnerability of JunOS operating system’s MX series routers lies in the simultaneous execution using shared resources with improper synchronization, allowing attackers to escalate their privileges, execute arbitrary code, or cause service failures.

The vulnerability of the JunOS operating system’s MX series routers lies in the simultaneous execution of processes using shared resources with incorrect synchronization. Exploiting this vulnerability allows a remote attacker to enhance their privileges, execute arbitrary code, or cause service...

8.3CVSS8AI score0.0027EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2021/04/09 6:15 p.m.9 views

CVE-2021-25376

An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed...

5.3CVSS0.00247EPSS
Exploits0References2
Prion
Prion
added 2021/04/09 6:15 p.m.12 views

Input validation

An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed...

5CVSS5.2AI score0.00247EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/09 5:39 p.m.14 views

CVE-2021-25376

An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed...

3.1CVSS5.5AI score0.00247EPSS
Exploits0References2
CVE
CVE
added 2021/04/09 5:39 p.m.60 views

CVE-2021-25376

CVE-2021-25376 affects Samsung Email prior to version 6.1.41.0 due to an improper synchronization logic, which can cause leakage of messages in plaintext in certain mailboxes when STARTTLS negotiation fails. The vulnerability is described in multiple sources as a leak in plaintext under a failed ...

5.3CVSS5.2AI score0.00247EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/04/06 8:15 p.m.20 views

CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

7.5CVSS7AI score0.00251EPSS
Exploits0References5
AlmaLinux
AlmaLinux
added 2021/04/06 1:32 p.m.13 views

sanlock bug fix and enhancement update

The sanlock packages provide a shared storage lock manager. Hosts with shared access to a block device or a file can use sanlock to synchronize their activities. VDSM and libvirt use sanlock to synchronize access to shared devices or files. Bug Fixes and Enhancements: Support 50 concurrent...

0.7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.1 views

The vulnerability in the implementation of the usbip_sockfd_store function in Linux kernel allows a hacker to induce a service failure.

The vulnerability in the implementation of the usbipsockfdstore function in Linux operating system kernels is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS6.6AI score0.00044EPSS
Exploits0References25Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.2 views

The vulnerability in the fs/io_uring.c file of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fs/iouring.c file in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00046EPSS
Exploits0References20Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.3 views

The vulnerability of the get_old_root file in the fs/btrfs/ctree.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the getoldroot file in the fs/btrfs/ctree.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.5AI score0.00086EPSS
Exploits0References33Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the lock_fdc() function in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the lockfdc function in Linux operating systems is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.6CVSS6.7AI score0.00033EPSS
Exploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the Mojo messaging library in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Mojo messaging library in Google Chrome browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

5.1CVSS7.9AI score0.02552EPSS
Exploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.1 views

The vulnerability of the GPU Display Driver’s driver lies in the simultaneous execution using shared resources with improper synchronization, allowing a hacker to cause service failure.

The vulnerability of the GPU Display Driver’s driver lies in the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.5AI score0.00038EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.3 views

The vulnerability of the X server component of the SDDM screen manager, related to simultaneous execution using a shared resource with incorrect synchronization, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the X server component of the SDDM screen manager is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data and compromise its integrity...

6.3CVSS6.9AI score0.00037EPSS
Exploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.2 views

The vulnerability of the touch_pmd() function in Linux operating systems allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the touchpmd function in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...

7CVSS6.8AI score0.07275EPSS
Exploits9References36Affected Software2
OPENSUSE Linux
OPENSUSE Linux
added 2021/03/20 12:0 a.m.27 views

Security update for connman (moderate)

openSUSE Security Update: Security update for connman Announcement ID: openSUSE-SU-2021:0452-1 Rating: moderate References: 1181751 Cross-References: CVE-2021-26675 CVE-2021-26676 CVSS scores: CVE-2021-26675 NVD : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-26676 NVD : 6.5...

8.8CVSS8.4AI score0.00186EPSS
Exploits0References1
Rows per page
Query Builder