Lucene search
+L

4465 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•6 views

CVE-2025-22394: Time-of-check Time-of-use (TOCTOU) Race Condition

Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution and possibly privilege escalation...

7CVSS6.2AI score0.00113EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/14 10:15 p.m.•23 views

CVE-2024-10253

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

4.7CVSS0.00124EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/14 9:17 p.m.•8 views

CVE-2024-10253

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

4.7CVSS6.8AI score0.00124EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/14 9:17 p.m.•38 views

CVE-2024-10253

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

4.7CVSS0.00124EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/14 9:17 p.m.•65 views

CVE-2024-10253

CVE-2024-10253 describes a potential TOCTOU vulnerability in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to crash the system. The initial entry lists a LOCAL attack vector with HIGH availability impact and MEDIUM overall severity (CVSS 3.1: AV:L/AC:H/...

4.7CVSS6.6AI score0.00124EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/14 3:00 p.m.•11 views

CVE-2024-42444 TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

7.5CVSS7.3AI score0.00116EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/14 3:00 p.m.•26 views

CVE-2024-42444 TOCTOU Race Condition between DMA and SMM

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

7.5CVSS0.00116EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/14 3:00 p.m.•65 views

CVE-2024-42444

CVE-2024-42444 affects AMI AptioV BIOS and is described as a TOCTOU race condition involving BIOS components (DMA/SMM) that may allow local attackers to execute arbitrary code on the target device. The available sources consistently report a BIOS-level vulnerability with a TOCTOU contention condi...

7.8CVSS7.6AI score0.00116EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•17 views

PT-2025-2636

Name of the Vulnerable Software and Affected Versions APTIOV affected versions not specified Description The issue is related to a TOCTOU Race Condition in the BIOS of APTIOV, which can be exploited by an attacker using local means. This could potentially lead to the execution of arbitrary code o...

7.8CVSS7.3AI score0.00116EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/01/14 12:00 a.m.•25 views

PT-2025-1583 · Lenovo · Lenovo Pcmanager +2

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Lenovo Browser affected versions not specified Lenovo App Store affected versions not specified Description: A potential TOCTOU vulnerability was reported that could allow a local attacker to...

4.7CVSS6.7AI score0.00124EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•7 views

CVE-2024-10253: Heap-based Buffer Overflow

A potential TOCTOU vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

4.7CVSS5.8AI score0.00124EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/14 12:00 a.m.•8 views

CVE-2024-42444: Time-of-check Time-of-use (TOCTOU) Race Condition

APTIOV contains a vulnerability in BIOS where an attacker may cause a TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to execution of arbitrary code on the target device...

7.8CVSS6.2AI score0.00116EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/10 12:00 a.m.•8 views

CVE-2024-41787: Time-of-check Time-of-use (TOCTOU) Race Condition

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...

9.8CVSS6.1AI score0.01105EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/12/30 12:00 a.m.•32 views

FreeBSD : Apache Tomcat -- RCE due to TOCTOU issue in JSP compilation (ed0a052a-c5e6-11ef-a457-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ed0a052a-c5e6-11ef-a457-b42e991fc52e advisory. [email protected] reports: Time-of-check Time-of-use TOCTOU Race Condition The mitigation for...

9.8CVSS7.2AI score0.31824EPSS
SaveExploits13References3
GithubExploit
GithubExploit
•added 2024/12/20 9:30 p.m.•991 views

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apache Tomcat

CVE-2024-50379 Proof of Concept PoC This repository contain...

9.8CVSS9.5AI score0.31824EPSS
SaveExploits13
Github Security Blog
Github Security Blog
•added 2024/12/20 6:31 p.m.•92 views

Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The mitigation for CVE-2024-50379 was incomplete. Users running Tomcat on a case insensiti...

9.8CVSS6.8AI score0.31824EPSS
SaveExploits13References9Affected Software3
osv_ghsa
osv_ghsa
•added 2024/12/20 6:31 p.m.•33 views

GHSA-27HP-XHWR-WR2M Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The mitigation for CVE-2024-50379 was incomplete. Users running Tomcat on a case insensiti...

9.2CVSS6.7AI score0.08969EPSS
SaveExploits1References9
osv_debian
osv_debian
•added 2024/12/20 4:15 p.m.•32 views

DEBIAN-CVE-2024-56337

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be...

9.8CVSS7AI score0.08969EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2024/12/20 4:15 p.m.•21 views

UBUNTU-CVE-2024-56337

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be...

9.8CVSS6.5AI score0.08969EPSS
SaveExploits1References4
Mend
Mend
•added 2024/12/20 3:28 p.m.•7 views

CVE-2024-56337

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be...

9.8CVSS0.08969EPSS
SaveExploits1References12
Rows per page
Query Builder