353 matches found
CVE-2015-5947: Concurrent Execution using Shared Resource with Improper Synchronization
SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code...
CVE-2014-9966: Concurrent Execution using Shared Resource with Improper Synchronization
In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use TOCTOU Race Condition vulnerability exists in Secure Display...
CVE-2016-10297: Concurrent Execution using Shared Resource with Improper Synchronization
In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist...
CVE-2014-9941: Concurrent Execution using Shared Resource with Improper Synchronization
In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentially exist...
openSUSE Security Update : java-1_7_0-openjdk (openSUSE-SU-2014:1638-1)
This openjdk update fixes the following security and non security issues : - Upgrade to 2.4.8 bnc887530 - Changed back from gzipped tarball to xz - Changed the keyring file to add Andrew John Hughes that signed the icedtea package - Change ZERO to AARCH64 tarball - Removed patches : -...
CVE-2014-2243: Concurrent Execution using Shared Resource with Improper Synchronization
includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timin...
CVE-2014-1921: Concurrent Execution using Shared Resource with Improper Synchronization
parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors...
CVE-2010-3412: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors...
CVE-2010-2024: Concurrent Execution using Shared Resource with Improper Synchronization
transports/appendfile.c in Exim before 4.72, when MBX locking is enabled, allows local users to change permissions of arbitrary files or create arbitrary files, and cause a denial of service or possibly gain privileges, via a symlink attack on a lockfile in /tmp/...
CVE-2009-4440: Concurrent Execution using Shared Resource with Improper Synchronization
Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges o...
CVE-2008-3646: Concurrent Execution using Shared Resource with Improper Synchronization
The Postfix configuration file in Mac OS X 10.5.5 causes Postfix to be network-accessible when mail is sent from a local command-line tool, which allows remote attackers to send mail to local Mac OS X users...
CVE-2003-1562: Concurrent Execution using Shared Resource with Improper Synchronization
sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password...
CVE-2007-1249: Concurrent Execution using Shared Resource with Improper Synchronization
MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the additional environment security configuration," which allows remote attackers with write permissions to reorder components...