Lucene search
K

3879 matches found

Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.1 views

PT-2026-32788

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A race condition occurs due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate...

7CVSS6.4AI score0.00047EPSS
Exploits0References6
Redos
Redos
added 2026/04/14 12:0 a.m.3 views

ROS-20260414-73-0003

Vulnerability in kernel-lt related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

4.7CVSS5.8AI score0.00013EPSS
Exploits0
Redos
Redos
added 2026/04/14 12:0 a.m.3 views

ROS-20260414-73-0017

Vulnerability in kernel-lt related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

4.7CVSS5.8AI score0.00017EPSS
Exploits0
Redos
Redos
added 2026/04/14 12:0 a.m.3 views

ROS-20260414-73-0026

Vulnerability in kernel-lt related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

4.7CVSS5.8AI score0.00016EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.0 views

PT-2026-32869

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description Concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an unauthorized attacker to cause a denial of service over a network...

5.9CVSS6.4AI score0.00082EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.1 views

PT-2026-32773

CVE-2026-27911 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows User Interface Core allows an authorized attacker to elevate pr… https://t.co/1EBHUgkLHF...

7.8CVSS6.4AI score0.00047EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.0 views

PT-2026-32750

CVE-2026-26173 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized atta… https://t.co/7eClolPk8J...

7CVSS6.4AI score0.00047EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.5 views

PT-2026-32808

Name of the Vulnerable Software and Affected Versions Windows SSDP Service affected versions not specified Description A race condition occurs in the Windows SSDP Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...

7CVSS6.2AI score0.00047EPSS
Exploits0References7
Redos
Redos
added 2026/04/14 12:0 a.m.3 views

ROS-20260414-73-0018

Vulnerability in kernel-lt related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

4.7CVSS5.8AI score0.00016EPSS
Exploits0
Redos
Redos
added 2026/04/14 12:0 a.m.2 views

ROS-20260414-73-0011

Vulnerability in kernel-lt related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

4.7CVSS5.8AI score0.00014EPSS
Exploits0
Fedora
Fedora
added 2026/04/13 9:7 p.m.2 views

[SECURITY] Fedora 44 Update: nomacs-3.22.0-5.fc44

nomacs is image viewer based on Qt5 library. nomacs is small, fast and able to handle the most common image formats. Additionally it is possible to synchronize multiple viewers running on the same computer or via LAN is possible. It allows to compare images and spot the differences e.g. schemes o...

9.8CVSS5.8AI score0.00087EPSS
Exploits3
Snyk
Snyk
added 2026/04/10 7:30 p.m.2 views

Directory Traversal

Overview @saltcorn/server is a Server app for Saltcorn, open-source no-code platform Affected versions of this package are vulnerable to Directory Traversal via the POST /sync/offlinechanges and GET /sync/uploadfinished endpoints, which improperly handle user-supplied input in path construction. ...

9.3CVSS6.3AI score0.00239EPSS
Exploits1References2
EUVD
EUVD
added 2026/04/10 7:30 p.m.1 views

EUVD-2026-21517

Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read...

8.2CVSS5.9AI score0.00239EPSS
Exploits1References2
NVD
NVD
added 2026/04/10 1:16 p.m.1 views

CVE-2026-5774

Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of service on the server or possibly reuse a single-use discharge token...

6.4CVSS0.00013EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/04/10 12:10 p.m.29 views

CVE-2026-5774 Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map

Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial of service on the server or possibly reuse a single-use discharge token...

6CVSS0.00013EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/04/10 12:0 a.m.3 views

PT-2026-31910

Name of the Vulnerable Software and Affected Versions Canonical Juju versions 2.9.56, 3.6.20, and 4.0.5 Description Improper synchronization within the userTokens map in the API server of Canonical Juju may allow an authenticated user to cause a denial of service on the server or potentially reus...

6.4CVSS5.8AI score0.00013EPSS
Exploits1References10
CNNVD
CNNVD
added 2026/04/10 12:0 a.m.2 views

Juju 安全漏洞

Juju is a canonical Juju open-source application orchestration engine. Versions 4.0.5, 3.6.20, and 2.9.56 of Juju have security vulnerabilities. These vulnerabilities stem from improper synchronization of user tokens in the API server, which may allow authenticated users to launch denial-of-servi...

6.4CVSS5.8AI score0.00013EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/04/09 9:26 p.m.1 views

CVE-2026-21919

An Incorrect Synchronization vulnerability in the management daemon mgd of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service DoS of the management plane. When NETCONF sessions are quickly established and...

7.1CVSS5.8AI score0.00051EPSS
Exploits0References2Affected Software2
CVE
CVE
added 2026/04/09 4:29 p.m.23 views

CVE-2026-39959

CVE-2026-39959 affects Tmds.DBus and Tmds.DBus.Protocol. A malicious D-Bus peer on the same bus can spoof signals, exhaust file descriptor resources by sending many Unix FDs, and crash apps via malformed messages that trigger unhandled SynchronizationContext exceptions. Fixes are in Tmds.DBus 0.9...

7.1CVSS5.9AI score0.00005EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/09 12:0 a.m.5 views

Juniper Networks Junos OS和Juniper Networks Junos OS Evolved 安全漏洞

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, a US-based company. Juniper Networks Junos OS is a network operating system specifically designed for the company’s hardware devices. This operating system provides secure programming interfaces...

7.1CVSS5.8AI score0.00051EPSS
Exploits0References1
Rows per page
Query Builder