Lucene search
+L

1382 matches found

Cvelist
Cvelist
added 2022/10/18 2:46 a.m.38 views

CVE-2022-22220 Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Routing Protocol Daemon rpd of Juniper Networks Junos OS, Junos OS Evolved allows a network-based unauthenticated attacker to cause a Denial of Service DoS. When a BGP flow route with redirect IP extended community is received, an...

5.9CVSS5.9AI score0.00474EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/10/17 12:00 a.m.13 views

PT-2022-21748 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to memory corruption in display due to time-of-check time-of-use of metadata reserved size. This affects various Snapdragon products, including Snapdragon...

8.4CVSS6.9AI score0.00085EPSS
SaveExploits0References3
CVE
CVE
added 2022/10/17 12:00 a.m.129 views

CVE-2022-33214

CVE-2022-33214 concerns memory corruption in the Qualcomm display stack caused by a time-of-check/time-of-use issue with metadata reserved size in Snapdragon devices (Auto/Compute/IoT/Wearables). Affected products include Snapdragon-based displays in Qualcomm components; root cause is TOCTOU in m...

8.4CVSS7.1AI score0.00085EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/17 12:00 a.m.6 views

CVE-2022-33214

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

8.4CVSS7.6AI score0.00085EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/17 12:00 a.m.35 views

CVE-2022-33214

Memory corruption in display due to time-of-check time-of-use of metadata reserved size in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

8.4CVSS8.8AI score0.00085EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/10/11 3:10 a.m.13 views

Time-of-check To Time-of-Use (TOCTOU)

go.etcd.io/etcd/v3 is vulnerable to time-of-check to time-of-use. The vulnerability exists because the startGateway function of gateway.go does not properly handle gateway endpoint validations, allowing an attacker to bypass the authentication mechanism...

2.8AI score
SaveExploits0
NVD
NVD
added 2022/10/10 9:15 p.m.25 views

CVE-2022-41744

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attacker to escalate privileges and turn a specific working directory into a mount point on affected installations. Please note: an attacker must first obtain th...

7CVSS0.00183EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/10 9:15 p.m.3 views

CVE-2022-41744

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attacker to escalate privileges and turn a specific working directory into a mount point on affected installations. Please note: an attacker must first obtain th...

7CVSS7.5AI score0.00183EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/10/10 12:00 a.m.30 views

CVE-2022-41744

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attacker to escalate privileges and turn a specific working directory into a mount point on affected installations. Please note: an attacker must first obtain th...

7.1AI score0.00183EPSS
SaveExploits0References2
CVE
CVE
added 2022/10/10 12:00 a.m.82 views

CVE-2022-41744

The CVE-2022-41744 entry concerns Trend Micro Apex One (on-prem and service variants) with a Time-of-Check Time-of-Use race condition in the Vulnerability Protection component. The vulnerability could let a local attacker escalate privileges and turn a specific working directory into a mount poin...

7CVSS6.9AI score0.00183EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/07 12:00 a.m.6 views

PT-2022-26050 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection integrated component could allow a local attacker to escalate privileges and turn...

7CVSS6.8AI score0.00183EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2022/09/21 6:21 p.m.8 views

CVE-2022-29800

A time-of-check-time-of-use TOCTOU race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes...

4.6AI score0.07162EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
added 2022/09/20 12:00 a.m.34 views

FreeBSD Kernel Netmap Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of FreeBSD Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

8.2CVSS3.3AI score0.00243EPSS
SaveExploits0References1
NVD
NVD
added 2022/09/16 6:15 a.m.33 views

CVE-2022-25696

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

8.4CVSS0.00085EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/16 6:15 a.m.5 views

CVE-2022-25696

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

8.4CVSS7AI score0.00085EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/16 6:15 a.m.29 views

Race condition

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

3.5CVSS7.1AI score0.00085EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/16 5:25 a.m.73 views

CVE-2022-25696

CVE-2022-25696 is a memory-corruption issue in Qualcomm Snapdragon display paths caused by a time-of-check/time-of-use race during map or unmap in multiple Snapdragon line products (Auto, Compute, Connectivity, Industrial IOT, Mobile, Wearables). The RedHat/PRION/NT references confirm a Qualcomm ...

8.4CVSS7.1AI score0.00085EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/09/06 12:00 a.m.46 views

Amazon Linux 2022 : tomcat, tomcat-admin-webapps, tomcat-el-3.0-api (ALAS2022-2022-044)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-044 advisory. The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a...

7CVSS7AI score0.56636EPSS
SaveExploits17References3
RedHat Linux
RedHat Linux
added 2022/07/07 2:19 p.m.10 views

tomcat: local privilege escalation vulnerability

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is...

7CVSS7.2AI score0.56636EPSS
SaveExploits17References5
ATTACKERKB
ATTACKERKB
added 2022/07/01 12:15 a.m.6 views

CVE-2022-27904

Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...

7CVSS7AI score0.00165EPSS
SaveExploits0References3
Rows per page
Query Builder