4245 matches found
CVE-2026-79730
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...
CVE-2026-79730
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...
EUVD-2026-74854
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...
CVE-2026-79730
Dell SCG 5.0 (Secure Connect Gateway) contains a TOCTOU race condition vulnerability in both its Appliance and Application editions. An unauthenticated remote attacker could exploit this to achieve denial of service . The assigned CVSS v3.1 score is 5.6 (MEDIUM) with a high attack complexity requ...
CVE-2026-79730
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...
CVE-2026-87816 PasswordPusher before 2.11.1 Race Condition View Limit Bypass
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
EUVD-2026-74842
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
CVE-2026-87816 PasswordPusher before 2.11.1 Race Condition View Limit Bypass
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
PT-2026-89173
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.6 through 0.11.0 Description An issue exists in the SafePlaywrightURLLoader component within backend/open webui/retrieval/web/utils.py affecting both sync and async request interceptors. The system validates a...
PT-2026-88954
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire after views limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
PT-2026-88961
Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description A Time-of-check Time-of-use TOCTOU Race Condition exists, which occurs when a program checks the state of a resource and then...
PT-2026-88977
Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description A Time-of-check Time-of-use TOCTOU Race Condition exists, which occurs when a program checks the state of a resource and then...
CVE-2026-79968: Time-of-check Time-of-use (TOCTOU) Race Condition
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...
CVE-2026-87816: Concurrent Execution using Shared Resource with Improper Synchronization
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expireafterviews limits. Attackers can send concurrent requests to the show endpoint to access one-time secrets multiple times before the...
CVE-2026-79730: Time-of-check Time-of-use (TOCTOU) Race Condition
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial o...
CVE-2026-87554: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
CVE-2026-87523: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87517: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-87457: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
CVE-2026-86766: Concurrent Execution using Shared Resource with Improper Synchronization
Snipe-IT versions up to and including 8.6.3 contain a race condition TOCTOU in the consumable checkout API endpoint POST /api/v1/consumables/consumableid/checkout. The requested quantity is validated against the number of remaining units before the database transaction begins, and the transaction...