Lucene search
+L

3618 matches found

Citrix
Citrix
•added 2024/02/05 12:00 a.m.•18 views

No License consumption after changing the License type

After changing the License type to concurrent the Licenses were not consumed License usage showed as 0 Used...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2024/01/31 12:00 a.m.•506 views

Proxmox VE - TOTP Brute Force

Exploit Title: Proxmox VE TOTP Brute Force Date: 09/23/2023 Exploit Author: Cory Cline, Gabe Rust Vendor Homepage: https://www.proxmox.com/en/ Software Link: http://download.proxmox.com/iso/ Version: 5.4 - 7.4-1 Tested on: Debian CVE : CVE-2023-43320 import time import requests import urllib.pars...

8.8CVSS7.9AI score0.01386EPSS
SaveExploits3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/31 12:00 a.m.•1 views

CVE-2024-23651: Concurrent Execution using Shared Resource with Improper Synchronization

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessibl...

8.7CVSS7.3AI score0.00911EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/01/31 12:00 a.m.•10 views

The vulnerability of the amdgpu_cs_wait_all_fences() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver for AMD Radeon graphics cards in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpucswaitallfences function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c driver for AMD Radeon graphics cards in the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability...

7.8CVSS6.3AI score0.00319EPSS
SaveExploits0References16Affected Software4
NVD
NVD
•added 2024/01/12 1:15 a.m.•24 views

CVE-2024-21601

A Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the Flow-processing Daemon flowd of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. On SRX Series devices when t...

5.9CVSS5.8AI score0.00454EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/12 1:15 a.m.•30 views

Race condition

A Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the Flow-processing Daemon flowd of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service Dos. On SRX Series devices when t...

2.6CVSS7.3AI score0.00454EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/01/10 9:30 a.m.•71 views

GHSA-F899-4MR4-FQPV Apache Answer Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

3.1CVSS3.6AI score0.00891EPSS
SaveExploits0References4
Prion
Prion
•added 2024/01/10 9:15 a.m.•27 views

Race condition

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

2.1CVSS7.1AI score0.00891EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2024/01/10 8:25 a.m.•26 views

CVE-2023-49619 Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

3.1CVSS6AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/01/10 8:25 a.m.•45 views

CVE-2023-49619 Apache Answer: Repeated submissions using scripts resulted in an abnormal number of collections for questions.

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer: through 1.2.0. Under normal circumstances, a user can only bookmark a question once, and will only increase the number of questions bookmarke...

4.3AI score0.00891EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/09 12:00 a.m.•1 views

CVE-2024-20700: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Hyper-V Remote Code Execution Vulnerability...

7.5CVSS7.8AI score0.0395EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/01/09 12:00 a.m.•23 views

The vulnerability of the do_vcc_ioctl() function in the net/atm/ioctl.c module, which implements the ATM network protocol in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dovccioctl function in the net/atm/ioctl.c module, which implements the ATM network protocol in the Linux operating system, is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attack...

7.1CVSS6.3AI score0.0051EPSS
SaveExploits0References15Affected Software4
BDU FSTEC
BDU FSTEC
•added 2024/01/09 12:00 a.m.•21 views

The vulnerability of the atalk_ioctl() function in the net/appletalk/ddp.c module, which is part of the AppleTalk protocol implementation in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the atalkioctl function in the net/appletalk/ddp.c module, which implements the Appletalk protocol in the Linux kernel, is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

7CVSS6.3AI score0.00308EPSS
SaveExploits0References14Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/01/09 12:00 a.m.•15 views

The vulnerability of the bt_sock_recvmsg() function in the net/bluetooth/af_bluetooth.c module of the Linux kernel’s Bluetooth driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the btsockrecvmsg function in the net/bluetooth/afbluetooth.c module of the Linux kernel’s Bluetooth driver is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to compromise the...

10CVSS6.6AI score0.00258EPSS
SaveExploits0References15Affected Software6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/08 12:00 a.m.•1 views

CVE-2022-3328: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in snap-confine's mustmkdirandopenwithperms...

7.8CVSS7.4AI score0.00384EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/23 12:00 a.m.•2 views

CVE-2016-15036: Concurrent Execution using Shared Resource with Improper Synchronization

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Deis Workflow Manager up to 2.3.2. It has been classified as problematic. This affects an unknown part. The manipulation leads to race condition. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgradin...

7.5CVSS4.9AI score0.00399EPSS
SaveExploits0References2
OSV
OSV
•added 2023/12/21 8:15 p.m.•22 views

AZL-32284 CVE-2023-6546 affecting package kernel for versions less than 5.15.148.1-1

A race condition was found in the GSM 0710 tty multiplexor in the Linux kernel. This issue occurs when two threads execute the GSMIOCSETCONF ioctl on the same tty file descriptor with the gsm line discipline enabled, and can lead to a use-after-free problem on a struct gsmdlci while restarting th...

7CVSS6.6AI score0.00735EPSS
SaveExploits0References1
Veracode
Veracode
•added 2023/11/29 10:12 a.m.•25 views

Denial Of Service (DoS)

apachesuperset is vulnerable to Denial Of Service DoS. The vulnerability is caused by a lack rate limiting in the API and dashboard functionalities. An attacker with authenticated access, could exploit this vulnerability by initiating multiple concurrent requests for dashboard exports. This can...

6.5CVSS6.8AI score0.01149EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2023/11/28 6:30 p.m.•32 views

Apache Superset Allocation of Resources Without Limits or Throttling vulnerability

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0...

6.5CVSS5.8AI score0.01149EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2023/11/28 6:15 p.m.•37 views

CVE-2023-42504

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service. This issue affects Apache Superset: before 3.0.0...

6.5CVSS0.01149EPSS
SaveExploits0References2
Rows per page
Query Builder