1389 matches found
Apache Tomcat 11.0.0.M1 < 11.0.2 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 11.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.2security-11 advisory. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat...
Apache Tomcat 10.1.0.M1 < 10.1.34 multiple vulnerabilities
The version of Tomcat installed on the remote host is prior to 10.1.34. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.1.34security-10 advisory. - Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomc...
PT-2024-70: Buffer Overflow in Suricata
The vulnerability was identified in Suricata versions 7.0.7 and below. Failure to check the input file size may result in a buffer overflow. Possible consequences of exploiting the vulnerability include an attacker gaining remote access to configuration files, injection a malicious BPF file into...
CVE-2024-53289
Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2024-53289
Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2024-53289
CVE-2024-53289 affects Dell ThinOS version 2408, describing a Time-of-check Time-of-use (TOCTOU) race condition that could allow a low-privileged, locally authenticated attacker to achieve Elevation of Privileges. Connected sources corroborate Dell ThinOS 2408 as the affected release and frame th...
Dell ThinOS 安全漏洞
Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS version 2408, which stems from a Time of Check to Time of Use TOCTOU race condition that could allow a low-privileged attacker with local access privileges to exploit the vulnerability, resultin...
Local Privilege Escalation
MLflow is vulnerable to Local Privilege Escalation. The vulnerability is due to excessive directory permissions, allowing a Time-of-Check to Time-of-Use ToCToU attack when the sparkudf MLflow API is called...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition due to excessive...
PYSEC-2024-224
Excessive directory permissions in MLflow leads to local privilege escalation when using sparkudf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the sparkudf MLflow API is called...
Juniper Junos OS Vulnerability (JSA88121)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA88121 advisory. - A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to...
K000148650: Intel processor vulnerabilities CVE-2024-22185 and CVE-2024-24985
Security Advisory Description CVE-2024-22185 Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-24985 Exposure of resource to wrong sphere in some IntelR processor...
CVE-2024-22185
Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-51563 bhyve(8) virtio_vq_recordon time-of-check to time-of-use race
The virtiovqrecordon function is subject to a time-of-check to time-of-use TOCTOU race condition...
PT-2024-34707 · Freebsd · Freebsd
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The virtio vq recordon function is subject to a time-of-check to time-of-use TOCTOU race condition. Recommendations: At the moment, there is no...
Adobe Creative Cloud < 5.1 Arbitrary File Deletion (APSB20-11)
The version of Adobe Creative Cloud installed on the remote Windows host is prior to 5.1. It is, therefore, affected by a vulnerability as referenced in the APSB20-11 advisory. - Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use toctou race condition...
CVE-2024-43882
...
CVE-2024-47494
A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...
CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0132)
The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0132 advisory. - NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU...
