Lucene search
+L

4248 matches found

OSV
OSV
•added 2024/10/29 7:48 p.m.•21 views

GHSA-MJJW-553X-87PQ NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...

9.3CVSS9.1AI score0.40842EPSS
SaveExploits2References6
GitLab Advisory Database
GitLab Advisory Database
•added 2024/10/29 12:00 a.m.•23 views

NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...

9CVSS7.3AI score0.40842EPSS
SaveExploits2References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•2 views

CVE-2024-49768: Time-of-check Time-of-use (TOCTOU) Race Condition

Waitress is a Web Server Gateway Interface server for Python 2 and 3. A remote client may send a request that is exactly recvbytes defaults to 8192 long, followed by a secondary request using HTTP pipelining. When request lookahead is disabled default we won't read any more requests, and when the...

9.1CVSS6.9AI score0.00486EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/21 12:00 a.m.•4 views

CVE-2024-49998: Time-of-check Time-of-use (TOCTOU) Race Condition

In the Linux kernel, the following vulnerability has been resolved: net: dsa: improve shutdown sequence Alexander Sverdlin presents 2 problems during shutdown with the lan9303 driver. One is specific to lan9303 and the other just happens to reproduce there. The first problem is that lan9303 is...

4.7CVSS5.5AI score0.00174EPSS
SaveExploits0References6
GithubExploit
GithubExploit
•added 2024/10/19 12:49 p.m.•528 views

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Thephpleague Flysystem

CVE-2021-32708 Affected versions of this package are vulnerabl...

9.8CVSS8.3AI score0.03486EPSS
SaveExploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2024/10/15 12:00 a.m.•151 views

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Microsoft Windows Kernel contains a time-of-check to time-of-use TOCTOU race condition vulnerability that could allow for privilege escalation...

7CVSS6.7AI score0.68202EPSS
SaveIn wildExploits7
Tenable Nessus
Tenable Nessus
•added 2024/10/14 12:00 a.m.•76 views

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2024-12782)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12782 advisory. - VMCI: Fix use-after-free when removing resource in vmciresourceremove David Fernandez Gonzalez Orabug: 37037205 CVE-2024-46738 - exec: Fix ToCTo...

9.8CVSS7.3AI score0.00922EPSS
SaveExploits4References72
NVD
NVD
•added 2024/10/11 4:15 p.m.•43 views

CVE-2024-47494

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

8.2CVSS0.00364EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/11 3:24 p.m.•23 views

CVE-2024-47494 Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

8.2CVSS7AI score0.00364EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/11 3:24 p.m.•42 views

CVE-2024-47494 Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

8.2CVSS0.00364EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/11 3:24 p.m.•82 views

CVE-2024-47494

CVE-2024-47494 affects Juniper Networks Junos OS, specifically the AgentD process and related FPC handling. A TOCTOU race condition during telemetry polling can cause AgentD to reaping an already destroyed sensor, leading to memory corruption and a DoS when the FPC crashes. The FPC auto-recovers ...

8.2CVSS5.9AI score0.00364EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2024/10/11 12:00 a.m.•34 views

CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0132)

The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0132 advisory. - NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU...

9CVSS8.7AI score0.40842EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/11 12:00 a.m.•7 views

CVE-2024-47494: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

8.2CVSS6.2AI score0.00364EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/10/10 12:31 p.m.•29 views

Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS6.6AI score0.00405EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/10/10 12:31 p.m.•24 views

GHSA-47JP-46C9-25VF Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

5.3CVSS4AI score0.00405EPSS
SaveExploits0References3
NVD
NVD
•added 2024/10/10 10:15 a.m.•46 views

CVE-2024-45120

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS0.00405EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/10 9:57 a.m.•29 views

CVE-2024-45120 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS0.00405EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/10 9:57 a.m.•16 views

CVE-2024-45120 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS6.7AI score0.00405EPSS
SaveExploits0References1
Mend
Mend
•added 2024/10/10 9:57 a.m.•3 views

CVE-2024-45120

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS0.00405EPSS
SaveExploits0References4
CVE
CVE
•added 2024/10/10 9:57 a.m.•93 views

CVE-2024-45120

CVE-2024-45120 affects Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier. The issue is a Time-of-check Time-of-use (TOCTOU) race condition that can bypass a security feature by altering a condition between the check and the resource use. The impact is described as low fo...

3.1CVSS4.5AI score0.00405EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder