1951 matches found
Race Condition
wordops is vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in stackpref.py. The vulnerability is due to calling os.open without a mode parameter during file creation, potentially allowing an attacker to manipulate the file before it is opened by the application...
CVE-2023-33119 Time-of-check Time-of-use (TOCTOU) Race Condition in Hypervisor
Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache...
WordOps has TOCTOU race condition
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
GHSA-23QQ-P4GQ-GC2G WordOps has TOCTOU race condition
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
PYSEC-2024-175
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
WordOps 安全漏洞
WordOps is an important toolset from WordOps that simplifies WordPress website and server management. A security vulnerability exists in WordOps 3.20.0 and earlier versions, which stems from the presence of a TOCTOU contention condition in wo/cli/plugins/stackpref.py because confpath os.open does...
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
CVE-2024-34528
WordOps up to version 3.20.0 is affected by a TOCTOU race condition in wo/cli/plugins/stack_pref.py. The root cause is conf_path os.open being used without a mode parameter during file creation, enabling a potential local race condition. The CVE (CVE-2024-34528) documents a HIGH-severity impact (...
CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stackpref.py TOCTOU race condition because the confpath os.open does not use a mode parameter during file creation...
CVE-2023-37244
The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp, which could be leveraged by an attacker to manipulate the process into...
CVE-2023-37244 Privilege escalation in N-Able's AutomationManagerAgent
The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp, which could be leveraged by an attacker to manipulate the process into...
CVE-2023-37244 Privilege escalation in N-Able's AutomationManagerAgent
The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp, which could be leveraged by an attacker to manipulate the process into...
CVE-2023-37244
The CVE-2023-37244 entry concerns AutomationManager.AgentService.exe and describes a TOCTOU race condition that lets standard users create a pseudo-symlink at C:\ProgramData\N-Able Technologies\AutomationManager\Temp. This could enable an attacker to manipulate the process into performing arbitra...
PT-2024-12603 · Alt N Technologies · Automationmanager.Agentservice.Exe
Name of the Vulnerable Software and Affected Versions: AutomationManager.AgentService.exe versions prior to 2.91.0.0 Description: The affected AutomationManager.AgentService.exe application contains a TOCTOU race condition vulnerability that allows standard users to create a pseudo-symlink at...
CVE-2022-48682
In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink...
CVE-2022-48682
In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink...