4248 matches found
CVE-2024-36304: Time-of-check Time-of-use (TOCTOU) Race Condition
A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order ...
RHEL 5 : logrotate (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - logrotate: TOCTOU race condition by creation of new files between opening the file and moment, final...
RHEL 4 : logrotate (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - logrotate: TOCTOU race condition by creation of new files between opening the file and moment, final...
RHEL 5 : shadow-utils (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - shadow-utils: TOCTOU race conditions by copying and removing directory trees CVE-2013-4235 Note that Nessus has not...
RHEL 4 : nss (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - nss: TOCTOU, potential use-after-free in libssl's session ticket processing MFSA 2014-12 CVE-2014-1490 -...
RHEL 5 : libuser (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libuser: TOCTOU race conditions by copying and removing directory trees CVE-2012-5630 - libuser: Security...
RHEL 6 : libuser (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libuser: TOCTOU race conditions by copying and removing directory trees CVE-2012-5630 - libuser: Complete...
CVE-2021-3899: Time-of-check Time-of-use (TOCTOU) Race Condition
There is a race condition in the 'replaced executable' detection that, with the correct local configuration, allow an attacker to execute arbitrary code as root...
Medium: fdupes
Issue Overview: In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. CVE-2022-48682 Affected Packages: fdupes Issue Correction: Run dnf update fdupes --releasever 2023.4.20240528 to update your system. New Packages: aarch64: ...
Amazon Linux 2023 : fdupes (ALAS2023-2024-633)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-633 advisory. In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. CVE-2022-48682 Tenable has extracted the preceding description block directly from the tested...
Medium: fdupes
Issue Overview: In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink. CVE-2022-48682 Affected Packages: fdupes Issue Correction: Run dnf update fdupes --releasever 2023.4.20240528 or dnf update --advisory ALAS2023-2024-633 --releasever...
Foxit PDF Editor < 11.2.10 Vulnerability
According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 11.2.10. It is, therefore affected by vulnerability: - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability...
Foxit PDF Editor < 13.1.2 Vulnerability
According to its version, the Foxit PDF Editor application previously named Foxit PhantomPDF installed on the remote Windows host is prior to 13.1.2. It is, therefore affected by vulnerability: - A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability...
CVE-2021-47280: Time-of-check Time-of-use (TOCTOU) Race Condition
In the Linux kernel, the following vulnerability has been resolved: drm: Fix use-after-free read in drmgetunique There is a time-of-check-to-time-of-use error in drmgetunique due to retrieving filepriv-master prior to locking the device's master mutex. An example can be seen in the crash report o...
OESA-2024-1616 fdupes security update
FDUPES is a program for identifying duplicate files residing within specified directories. Security Fixes: In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.CVE-2022-48682...
OESA-2024-1615 fdupes security update
FDUPES is a program for identifying duplicate files residing within specified directories. Security Fixes: In deletefiles in FDUPES before 2.2.0, a TOCTOU race condition allows arbitrary file deletion via a symlink.CVE-2022-48682...
CVE-2024-3290: Time-of-check Time-of-use (TOCTOU) Race Condition
A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host...
CVE-2024-3292: Time-of-check Time-of-use (TOCTOU) Race Condition
A race condition vulnerability exists where an authenticated, local attacker on a Windows Nessus Agent host could modify installation parameters at installation time, which could lead to the execution of arbitrary code on the Nessus host. - CVE-2024-3292...
CVE-2024-21792: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check Time-of-use race condition in IntelR Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access...
