Lucene search
+L

2347 matches found

Github Security Blog
Github Security Blog
added 2024/10/29 7:48 p.m.28 views

NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...

9CVSS7.8AI score0.38673EPSS
SaveExploits2References6Affected Software1
OSV
OSV
added 2024/10/29 7:48 p.m.17 views

GHSA-MJJW-553X-87PQ NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...

9.3CVSS9.1AI score0.38673EPSS
SaveExploits2References6
GitLab Advisory Database
GitLab Advisory Database
added 2024/10/29 12:00 a.m.19 views

NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...

9CVSS7.3AI score0.38673EPSS
SaveExploits2References7Affected Software1
GithubExploit
GithubExploit
added 2024/10/19 12:49 p.m.514 views

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Thephpleague Flysystem

CVE-2021-32708 Affected versions of this package are vulnerabl...

9.8CVSS8.3AI score0.03486EPSS
SaveExploits2
CISA KEV Catalog
CISA KEV Catalog
added 2024/10/15 12:00 a.m.116 views

Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

Microsoft Windows Kernel contains a time-of-check to time-of-use TOCTOU race condition vulnerability that could allow for privilege escalation...

7CVSS6.7AI score0.68202EPSS
SaveIn wildExploits7
Tenable Nessus
Tenable Nessus
added 2024/10/14 12:00 a.m.66 views

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel-container (ELSA-2024-12782)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12782 advisory. - VMCI: Fix use-after-free when removing resource in vmciresourceremove David Fernandez Gonzalez Orabug: 37037205 CVE-2024-46738 - exec: Fix ToCTo...

9.8CVSS7.3AI score0.00922EPSS
SaveExploits4References72
NVD
NVD
added 2024/10/11 4:15 p.m.30 views

CVE-2024-47494

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

8.2CVSS0.00364EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/11 3:24 p.m.65 views

CVE-2024-47494

CVE-2024-47494 affects Juniper Networks Junos OS, specifically the AgentD process and related FPC handling. A TOCTOU race condition during telemetry polling can cause AgentD to reaping an already destroyed sensor, leading to memory corruption and a DoS when the FPC crashes. The FPC auto-recovers ...

8.2CVSS5.9AI score0.00364EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/10/11 3:24 p.m.33 views

CVE-2024-47494 Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

8.2CVSS0.00364EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/11 3:24 p.m.21 views

CVE-2024-47494 Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC reset

A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in the AgentD process of Juniper Networks Junos OS allows an attacker who is already causing impact to established sessions which generates counter changes picked up by the AgentD process during telemetry polling, to move the AgentD...

8.2CVSS7AI score0.00364EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/11 12:00 a.m.27 views

CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0132)

The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0132 advisory. - NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU...

9CVSS8.7AI score0.38673EPSS
SaveExploits2References2
OSV
OSV
added 2024/10/10 12:31 p.m.21 views

GHSA-47JP-46C9-25VF Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

5.3CVSS4AI score0.0037EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2024/10/10 12:31 p.m.22 views

Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS6.6AI score0.0037EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/10/10 10:15 a.m.39 views

CVE-2024-45120

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS0.0037EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/10 9:57 a.m.24 views

CVE-2024-45120 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS0.0037EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/10 9:57 a.m.15 views

CVE-2024-45120 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS6.7AI score0.0037EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/10 9:57 a.m.76 views

CVE-2024-45120

CVE-2024-45120 affects Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier. The issue is a Time-of-check Time-of-use (TOCTOU) race condition that can bypass a security feature by altering a condition between the check and the resource use. The impact is described as low fo...

3.1CVSS4.5AI score0.0037EPSS
SaveExploits0References1Affected Software3
OSV
OSV
added 2024/10/10 9:57 a.m.15 views

CVE-2024-45120 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use TOCTOU Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use...

3.1CVSS6AI score
SaveExploits0References3
NVD
NVD
added 2024/10/03 3:15 p.m.17 views

CVE-2024-5803

The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use TOCTOU when self protection is disabled...

7.5CVSS0.0011EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/03 2:20 p.m.26 views

CVE-2024-5803 Local privelage escalation via COM hijacking

The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use TOCTOU when self protection is disabled...

7.5CVSS0.0011EPSS
SaveExploits0References1
Rows per page
Query Builder