Lucene search
+L

4465 matches found

NVD
NVD
•added 2024/06/25 4:15 p.m.•39 views

CVE-2024-0171

Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

5.3CVSS0.00098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/25 3:30 p.m.•40 views

CVE-2024-0171

Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

5.3CVSS0.00098EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/06/25 3:30 p.m.•42 views

CVE-2024-0171

Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

5.3CVSS7AI score0.00098EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/25 3:30 p.m.•72 views

CVE-2024-0171

Dell PowerEdge Server BIOS contains a TOCTOU race condition that could allow a local, low-privilege attacker to access restricted resources. Affected component is the BIOS on Dell PowerEdge servers; root cause is a TOCTOU concurrency issue. The vulnerability is rated locally exploitable with high...

5.3CVSS7AI score0.00098EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•7 views

CVE-2024-0171: Time-of-check Time-of-use (TOCTOU) Race Condition

Dell PowerEdge Server BIOS contains an TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise unauthorized resources...

5.3CVSS6AI score0.00098EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/06/25 12:00 a.m.•5 views

PT-2024-15365

Name of the Vulnerable Software and Affected Versions Dell PowerEdge Server BIOS affected versions not specified Description The issue is related to a TOCTOU race condition vulnerability. A local low privileged attacker could potentially exploit this vulnerability to gain access to otherwise...

5.3CVSS6AI score0.00098EPSS
SaveExploits0References5
Hewlett-Packard
Hewlett-Packard
•added 2024/06/25 12:00 a.m.•58 views

HP PC BIOS Additional Security Update for TOCTOU

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability. HP has...

7.8CVSS7.6AI score0.00117EPSS
SaveExploits0Affected Software358
Vulnrichment
Vulnrichment
•added 2024/06/14 4:10 a.m.•27 views

CVE-2024-27180 TOCTOU vulnerability

An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL...

6.7CVSS7.2AI score0.0027EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/06/14 4:10 a.m.•39 views

CVE-2024-27180 TOCTOU vulnerability

An attacker with admin access can install rogue applications. As for the affected products/models/versions, see the reference URL...

6.7CVSS0.0027EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/06/12 4:26 p.m.•48 views

CVE-2024-5558

CWE-367: Time-of-check Time-of-use TOCTOU Race Condition vulnerability exists that could cause escalation of privileges when an attacker abuses a limited admin account...

6.4CVSS0.0011EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•5 views

CVE-2024-5558: Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-367: Time-of-check Time-of-use TOCTOU Race Condition vulnerability exists that could cause escalation of privileges when an attacker abuses a limited admin account...

6.4CVSS6.7AI score0.0011EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/06/11 5:15 p.m.•50 views

CVE-2024-30088

Windows Kernel Elevation of Privilege Vulnerability...

7CVSS7.7AI score0.68202EPSS
SaveIn wildExploits7References2Affected Software14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•4 views

CVE-2024-30099: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Kernel Elevation of Privilege Vulnerability...

7CVSS7AI score0.00544EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•2 views

CVE-2024-30088: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Kernel Elevation of Privilege Vulnerability...

7CVSS7.7AI score0.68202EPSS
SaveExploits7References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•4 views

CVE-2024-30084: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

7CVSS7.2AI score0.05907EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/11 12:00 a.m.•6 views

CVE-2024-35265: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Perception Service Elevation of Privilege Vulnerability...

7CVSS7AI score0.00368EPSS
SaveExploits0References4
Metasploit
Metasploit
•added 2024/06/11 12:00 a.m.•1111 views

Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes

CVE-2024-30088 is a Windows Kernel Elevation of Privilege Vulnerability which affects many recent versions of Windows 10, Windows 11 and Windows Server 2022. The vulnerability exists inside the function called AuthzBasepCopyoutInternalSecurityAttributes specifically when the kernel copies the...

7CVSS7.8AI score0.68202EPSS
SaveExploits7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/10 12:00 a.m.•3 views

CVE-2024-36304: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...

7.8CVSS7.5AI score0.00401EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•26 views

RHEL 5 : libuser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libuser: TOCTOU race conditions by copying and removing directory trees CVE-2012-5630 - libuser: Security...

6.3CVSS6.7AI score0.08503EPSS
SaveExploits11References4
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•26 views

RHEL 6 : libuser (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libuser: TOCTOU race conditions by copying and removing directory trees CVE-2012-5630 - libuser: Complete...

6.3CVSS6.4AI score0.00407EPSS
SaveExploits0References2
Rows per page
Query Builder