Lucene search
+L

2866 matches found

OSV
OSV
added 2020/03/14 8:15 p.m.18 views

CVE-2020-10577

An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions...

4.8CVSS6.8AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/03/14 8:15 p.m.40 views

CVE-2020-10577

An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions...

5.8CVSS5.9AI score0.00464EPSS
SaveExploits0References2
OSV
OSV
added 2020/03/14 8:15 p.m.15 views

UBUNTU-CVE-2020-10577

An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions...

4.8CVSS5.8AI score0.00464EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/03/14 7:7 p.m.34 views

CVE-2020-10577

An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions...

5AI score0.00464EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/03 12:0 a.m.2 views

MISP Competitive Conditions Issue Loophole

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. MISP is vulnerable to a competitive conditions issue. The vulnerability arises from improp...

5.9CVSS7.1AI score0.01098EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2020/03/01 12:30 p.m.242 views

Subfinder - A Subdomain Discovery Tool That Discovers Valid Subdomains For Websites

subfinder is a subdomain discovery tool that discovers valid subdomains for websites by using passive online sources. It has a simple modular architecture and is optimized for speed. subfinder is built for doing one thing only - passive subdomain enumeration, and it does that very well. We have...

7.4AI score
SaveExploits0References3
Kitploit
Kitploit
added 2020/02/24 9:0 p.m.79 views

Dnssearch - A Subdomain Enumeration Tool

This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on the top...

7.3AI score
SaveExploits0References1
Veracode
Veracode
added 2020/01/30 3:13 p.m.16 views

Information Leakage Through Denial Of Service (DoS)

github.com/ gammazero/nexus is vulnerable to information leakage through denial of service attacks. The router can reassign call results to the wrong session when two clients are connecting concurrently and performing long running calls with the same request ID, resulting in denial of service...

2.3AI score
SaveExploits0
NVD
NVD
added 2020/01/28 3:15 p.m.21 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.7AI score0.02835EPSS
SaveExploits1References5
OSV
OSV
added 2020/01/28 3:15 p.m.7 views

UBUNTU-CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.1AI score0.02835EPSS
SaveExploits1References2
OSV
OSV
added 2020/01/28 3:15 p.m.24 views

PYSEC-2020-249

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS6.3AI score0.02835EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
added 2020/01/28 3:15 p.m.28 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.1AI score0.02835EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2020/01/28 2:30 p.m.44 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.5CVSS7.7AI score0.02835EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/01/28 2:30 p.m.30 views

CVE-2013-1895

The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...

7.7AI score0.02835EPSS
SaveExploits1References5
Gitee
Gitee
added 2019/12/28 11:7 a.m.10 views

POC-T

This is a Python-based penetration testing framework called POC-T. It is designed to facilitate concurrent testing of multiple targets and supports various features such as multi-threading, URL parsing, and user agent management. The framework includes a range of scripts for testing different...

8.4AI score
SaveExploits0
CNVD
CNVD
added 2019/12/26 12:0 a.m.8 views

BullGuard Premium Protection Privileged File Deletion Vulnerability

BullGuard Premium Protection is a computer network security suite from BullGuard UK. A competitive conditions issue vulnerability exists in the malware scanning feature in BullGuard Premium Protection version 20.0.371.8. The vulnerability arises from improper handling of concurrent access when...

5.9CVSS7AI score0.00561EPSS
SaveExploits1References1
NVD
NVD
added 2019/12/18 6:15 a.m.25 views

CVE-2019-10517

Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096,...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/18 6:15 a.m.24 views

Design/Logic Flaw

Memory is being freed up twice when two concurrent threads are executing in parallel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8017, APQ8053, APQ8096,...

4.6CVSS7.8AI score0.00189EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/15 12:0 a.m.6 views

eDeploy Competitive Conditions Issue Vulnerability

eDeploy is a configuration and update tool for Linux systems. A Competing Conditions Issue vulnerability exists in eDeploy, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during operation of a networked system o...

9.3CVSS7.1AI score0.015EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/12/02 12:0 a.m.5 views

gs-gpl competitive conditions issue vulnerability

gs-gpl is a Ghostscript PostScript interpreter. A competing condition issue vulnerability exists in gs-gpl versions prior to 8.56, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during operation of a networked...

8.1CVSS7AI score0.00823EPSS
SaveExploits0References1
Rows per page
Query Builder