4248 matches found
CVE-2024-30471
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and...
CVE-2024-30471: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check Time-of-use TOCTOU Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to potentially request the creation of multiple accounts with the same email address until the email address is registered, creating many identical users and...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft
Collateral Damage Collateral Damage is a kernel exploit for Xb...
CVE-2024-39821: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access...
CVE-2024-39826: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in Team Chat for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct information disclosure via network access...
CVE-2024-27238: Time-of-check Time-of-use (TOCTOU) Race Condition
Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a privilege escalation via local access...
CVE-2024-27361
A vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, and Exynos 2400 that involves a time-of-check to time-of-use TOCTOU race condition, which can lead to a Denial of Service...
CVE-2024-27361
The CVE-2024-27361 entry describes a TOCTOU race condition in Samsung Mobile Processor Exynos family (models 980–2400). The vulnerability affects Exynos from 980 up through 2400 and can cause Denial of Service. The connected PT-2024-21849 security note states affected versions range 980–2400 and ...
CVE-2024-27361: Time-of-check Time-of-use (TOCTOU) Race Condition
A vulnerability was discovered in Samsung Mobile Processor Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, and Exynos 2400 that involves a time-of-check to time-of-use TOCTOU race condition, which can lead to a Denial of Service...
CVE-2024-6601: Time-of-check Time-of-use (TOCTOU) Race Condition
A race condition could lead to a cross-origin container obtaining permissions of the top-level origin. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...
Toshiba Printers Multiple Vulnerabilities (May 2024)
Multiple Toshiba printers are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft
CVE-2024-30088-Windows-poc This vulnerability resides in the...
CVE-2024-39936: Time-of-check Time-of-use (TOCTOU) Race Condition
An issue was discovered in HTTP2 in Qt before 5.15.18, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.7, and 6.6.x through 6.7.x before 6.7.3. Code to make security-relevant decisions about an established connection may execute too early, because the encrypted signal has not yet been emitted a...
CVE-2024-39894: Time-of-check Time-of-use (TOCTOU) Race Condition
OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry e.g., for su and Sudo because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur...
Huawei EulerOS: Security Advisory for iSulad (EulerOS-SA-2024-1872)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for iSulad (EulerOS-SA-2024-1858)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-27540
A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...
CVE-2022-27540
A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...
CVE-2022-27540
A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the HP BIOS for certain HP PC products. This flaw could potentially allow an attacker to achieve arbitrary code execution , denial of service , and information disclosure . HP has released BIOS updates to mitigate this vulnerability;...
EulerOS 2.0 SP12 : iSulad (EulerOS-SA-2024-1872)
According to the versions of the iSulad package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Time-of-check Time-of-use TOCTOU Race Condition vulnerability in openEuler iSulad on Linux allows Leveraging Time-of-Check and Time-of-Use TOCTOU...