Dell iDRAC9 Time-of-check Time-of-use Race Condition (CVE-2021-21539)

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use TOCTOU race condition vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is simultaneously accessing iDRAC throu...

CVE-2022-48618: Time-of-check Time-of-use (TOCTOU) Race Condition

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been...

CVE-2023-43741: Time-of-check Time-of-use (TOCTOU) Race Condition

A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to bypass a symbolic link check for the PIPELINEPATH variable in the fix-buildkite-agent-builds-permissions script...

CVE-2023-6690: Time-of-check Time-of-use (TOCTOU) Race Condition

A race condition in GitHub Enterprise Server allowed an existing admin to maintain permissions on transferred repositories by making a GraphQL mutation to alter repository permissions during the transfer. This vulnerability affected GitHub Enterprise Server version 3.8.0 and above and was fixed i...

CVE-2023-46649: Time-of-check Time-of-use (TOCTOU) Race Condition

A race condition in GitHub Enterprise Server was identified that could allow an attacker administrator access. To exploit this, an organization needs to be converted from a user. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.7.19, 3.8.12...

CVE-2023-6803: Time-of-check Time-of-use (TOCTOU) Race Condition

A race condition in GitHub Enterprise Server allows an outside collaborator to be added while a repository is being transferred. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.12, 3.9.7, 3.10.4, and 3.11.1...

CVE-2022-45809

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...

Race condition

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...

CVE-2022-45809 WordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race Condition

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...

CVE-2022-45809

CVE-2022-45809 is a TOCTOU race condition vulnerability in the WordPress plugin Thumbs Rating (Ricard Torres) affecting versions up to 5.0.0. The issue arises from a race between time-of-check and time-of-use in the plugin’s handling of rating data. Public scoring places base CVSS v3.1 at 3.7 (Lo...

CVE-2022-45809: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Ricard Torres Thumbs Rating.This issue affects Thumbs Rating: from n/a through 5.0.0...

PT-2023-14761

Name of the Vulnerable Software and Affected Versions Thumbs Rating versions n/a through 5.0.0 Description A Time-of-check Time-of-use TOCTOU Race Condition issue exists. This is a type of vulnerability that occurs when there is a discrepancy between the time a resource is checked and the time it...

Race condition

TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel 5.5 before version 05.52.13 allows an attacker to alter data and code used by the remainder of the boot process...

CVE-2022-24351: Time-of-check Time-of-use (TOCTOU) Race Condition

TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel 5.5 before version 05.52.13 allows an attacker to alter data and code used by the remainder of the boot process...

CVE-2022-24351

The CVE-2022-24351 issue affects InsydeH2O BIOS used in Siemens/InsydeH2O platforms (e.g., various Kernel 5.x branches) and is a TOCTOU race condition that can alter data and code used during the boot process. The connected documents confirm affected versions: InsydeH2O 5.2 before 05.27.29, 5.3 b...

CVE-2022-24351

TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before version 05.36.29, Kernel 5.4 version before 05.44.13, and Kernel 5.5 before version 05.52.13 allows an attacker to alter data and code used by the remainder of the boot process...

CVE-2023-42483

A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can cause unexpected termination of a system...

Race condition

A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can cause unexpected termination of a system...

CVE-2023-42483

CVE-2023-42483 affects Samsung Mobile Processor Exynos 9820, 980, 1080, 2100, 2200, 1280, and 1380. The root cause is a TOCTOU race condition that can cause an unexpected termination of the system, indicating an availability impact. Exploitation status and concrete exploit details are not provide...

CVE-2023-42483

A TOCTOU race condition in Samsung Mobile Processor Exynos 9820, Exynos 980, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, and Exynos 1380 can cause unexpected termination of a system...