CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

CVE-2022-41882

The CVE-2022-41882 entry concerns the Nextcloud Desktop Client. Affected product: Nextcloud Desktop Client prior to version 3.6.1. Root cause: clicking a nc://open/ link for a malicious shared file, when the file is locally synced or the virtual filesystem is enabled, can cause the default editor...

Microsoft Windows PPTP Code Execution

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially craft...

Denial Of Service (DoS)

389-ds-base is vulnerable to Denial Of Service DoS. The vulnerability exists when the content synchronization plugin is enabled, allowing an attacker crash the application through the null pointer dereference by providing a maliciously crafted query...

CVE-2022-41118: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Scripting Languages Remote Code Execution Vulnerability...

CVE-2022-41114: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Bind Filter Driver Elevation of Privilege Vulnerability...

CVE-2022-41088: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

CVE-2022-41086: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Group Policy Elevation of Privilege Vulnerability...

CVE-2022-41045: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-41039: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

CVE-2022-44551: Concurrent Execution using Shared Resource with Improper Synchronization

The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability...

CVE-2022-41116: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...

CVE-2022-38014: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...

CVE-2022-41090: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...

CVE-2022-41093: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

CVE-2022-41044: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

Apache Tomcat Privilege Escalation

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their privileges...

Microsoft Windows PPTP Code Execution

The vulnerability of the Point to Point Tunneling Protocol PPTP network protocol implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Apache Tomcat Synchronization Unauthorized Access

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Moderate: Red Hat Security Advisory: rsync security and enhancement update

An update for rsync is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...