Lucene search
+L

4515 matches found

CVE
CVE
•added 2025/09/01 7:03 p.m.•39 views

CVE-2025-9810

TOCTOU vulnerability CVE-2025-9810 in linenoiseHistorySave (linenoise) enables local attackers to overwrite files or change permissions via a symlink race between fopen("w") on the history path and a subsequent chmod() on the same path. Connected advisories confirm this CVE affects Redis-related ...

6.8CVSS6.2AI score0.00107EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2025/09/01 7:03 p.m.•6 views

CVE-2025-9810

TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen"w" on the history path and subsequent chmod on the same path...

7CVSS0.00107EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/01 12:00 a.m.•2 views

CVE-2025-9810: Time-of-check Time-of-use (TOCTOU) Race Condition

TOCTOU in linenoiseHistorySave in linenoise allows local attackers to overwrite arbitrary files and change permissions via a symlink race between fopen"w" on the history path and subsequent chmod on the same path...

6.8CVSS5.9AI score0.00107EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2021-26910

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an...

7.8CVSS6.8AI score0.00444EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2022-1537

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. Thi...

7.8CVSS7.3AI score0.00302EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/26 12:00 a.m.•8 views

CVE-2025-44002: Time-of-check Time-of-use (TOCTOU) Race Condition

Race Condition in the Directory Validation Logic in the TeamViewer Full Client and Host prior version 15.69 on Windows allows a local non-admin user to create arbitrary files with SYSTEM privileges, potentially leading to a denial-of-service condition, via symbolic link manipulation during...

6.1CVSS5.8AI score0.00101EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•5 views

CVE-2025-54667: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Saad Iqbal myCred mycred allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions.This issue affects myCred: from n/a through = 2.9.4.3...

5.3CVSS5.8AI score0.00214EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/08/14 12:00 a.m.•17 views

EulerOS 2.0 SP11 : screen (EulerOS-SA-2025-1942)

According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.CVE-2025-46802 A minor information...

6CVSS6.1AI score0.00234EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/14 12:00 a.m.•16 views

EulerOS 2.0 SP11 : screen (EulerOS-SA-2025-1968)

According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.CVE-2025-46802 A minor information...

6CVSS6.1AI score0.00234EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/08/14 12:00 a.m.•21 views

EulerOS 2.0 SP13 : screen (EulerOS-SA-2025-1985)

According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when...

6CVSS6.1AI score0.00234EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2025/08/12 5:55 p.m.•9 views

CVE-2025-49558

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the...

5.9CVSS5.8AI score0.00401EPSS
SaveExploits0References2
Mend
Mend
•added 2025/08/12 5:55 p.m.•7 views

CVE-2025-49558

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the...

8.2CVSS0.00401EPSS
SaveExploits0References4
Microsoft CVE
Microsoft CVE
•added 2025/08/12 7:00 a.m.•12 views

Windows NTFS Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows NTFS allows an unauthorized attacker to disclose information locally...

7CVSS6.8AI score0.00377EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•4 views

CVE-2025-49558: Time-of-check Time-of-use (TOCTOU) Race Condition

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the...

5.9CVSS5.8AI score0.00401EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2025/08/12 12:00 a.m.•3 views

Huawei EulerOS: Security Advisory for screen (EulerOS-SA-2025-1985)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6CVSS7.5AI score0.00234EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•4 views

CVE-2025-53134: Time-of-check Time-of-use (TOCTOU) Race Condition

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

7CVSS5.7AI score0.00318EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•6 views

CVE-2025-53788: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

7CVSS5.6AI score0.00228EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•2 views

CVE-2025-50158: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows NTFS allows an unauthorized attacker to disclose information locally...

7CVSS5.6AI score0.00377EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•6 views

CVE-2025-20074: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00125EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•4 views

CVE-2025-20037: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition in firmware for some IntelR Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access...

7.2CVSS5.8AI score0.00095EPSS
SaveExploits0References1
Rows per page
Query Builder