Apple TV 竞争条件问题漏洞

Apple TV 4K and Apple TV HD are both products of Apple Inc.Apple TV 4K is a smart set-top box. The Apple TV 4K is a smart set-top box used to launch 4K Hdr images.Apple TV HD is a high-definition television set-top box product.... Apple TV 4K, Apple TV 4K 2nd Generation, and Apple TV HD are...

xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a path contention issue in roseconnect...

Linux kernel resource management error vulnerability (CNVD-2022-36963)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.17.3 have a security vulnerability that stems from a contention condition in the iouring timeout, fs/iouring.c with use-after-free. No details of the vulnerability are...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel versions prior to 5.17.3 have a security vulnerability that stems from a contention condition in the iouring timeout, fs/iouring.c with use-after-free. No details of the vulnerability are...

Cisco Iox 竞争条件问题漏洞

Cisco Iox is a secure development environment from Cisco that combines Cisco IOS and Linux OS for secure network connectivity and development of IOT applications. The Cisco Iox application hosting environment is vulnerable to a contention condition issue, which stems from a contention condition f...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A resource management error vulnerability exists in versions of Linux kernel prior to 5.17.1, which stems from the fact that jbd2journalwaitupdates in fs/jbd2/transaction.c has...

Google Android Competition Condition Issue Vulnerability (CNVD-2022-46300)

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to a contention condition issue that originates in gasketalloccoherentmemory in gasketpagetable.c. A memory corruption due to a contention condition error can be exploited by an attacker to...

Google Android Information Disclosure Vulnerability (CNVD-2022-44603)

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in acropora/app/identity/libeic/EicPresentation.c. An information disclosure due to a contention condition error exists in eicPresentationRetrieveEntryValue. An attacker...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44601)

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in Google Android, which is caused by an out-of-bounds read in usbgadgetgivebackrequest in core.c due to a contention condition. An attacker could exploit the vulnerability to cau...

Zulip Competition Conditions Issue Vulnerability

Zulip is a powerful open source group chat application from the Zulip team. Used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations, a contention issue vulnerability exists in Zulip versions 4.0 and prior to 4.11, which stems from the fact that Zul...

Zulip 竞争条件问题漏洞

Zulip is a powerful open source group chat application from the Zulip team. Used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations, a contention issue vulnerability exists in Zulip versions 4.0 and prior to 4.11, which stems from the fact that Zul...

CVE-2022-0084

A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an attacker to send flawed requests to a server, possibly causing log contention-related performance concerns or an unwanted disk...

Mozilla Firefox Conditional Competition Vulnerability (CNVD-2025-18681)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a conditional contention vulnerability that originates when installing a plug-in and Firefox verifies the signature before prompting the user. A remote attacker can exploit...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a conditional contention vulnerability that originates when installing a plug-in and Firefox verifies the signature before prompting the user. A remote attacker can exploit...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to a contention condition issue that originates in gasketalloccoherentmemory in gasketpagetable.c. A memory corruption due to a contention condition error can be exploited by an attacker to...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in Google Android, which is caused by an out-of-bounds read in usbgadgetgivebackrequest in core.c due to a contention condition. An attacker could exploit the vulnerability to cau...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in acropora/app/identity/libeic/EicPresentation.c. An information disclosure due to a contention condition error exists in eicPresentationRetrieveEntryValue. An attacker...

snapd competition condition issue vulnerability

Snapd is an open source, cross-platform package management tool. snapd is vulnerable to a contention issue, which can be exploited by local attackers to gain root privileges and execute arbitrary code to gain privilege escalation by binding to mount their own content in snap's private mount...

Atlassian Jira Server ViewInstrumentation.jspa Cross-site Request Forgery Vulnerability

Atlassian Jira Service is the server version of an IT service desk and request tracking system from Atlassian Australia. The Atlassian Jira Server is vulnerable to cross-site request forgery, which stems from an application/secure/admin/ViewInstrumentation.jspa endpoint that does not adequately...