CVE-2015-5948: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-5947...

CVE-2017-8257: Concurrent Execution using Shared Resource with Improper Synchronization

In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sderotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use...

CVE-2017-0727: Concurrent Execution using Shared Resource with Improper Synchronization

A elevation of privilege vulnerability in the Android media framework libgui. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354...

CVE-2015-7543: Concurrent Execution using Shared Resource with Improper Synchronization

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

CVE-2017-11353: Concurrent Execution using Shared Resource with Improper Synchronization

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

CVE-2015-5232: Concurrent Execution using Shared Resource with Improper Synchronization

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197...

CVE-2016-9256: Concurrent Execution using Shared Resource with Improper Synchronization

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal...

CVE-2016-3106: Concurrent Execution using Shared Resource with Improper Synchronization

Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...

CVE-2015-8556: Concurrent Execution using Shared Resource with Improper Synchronization

Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1...

CVE-2016-9962: Concurrent Execution using Shared Resource with Improper Synchronization

RunC allowed additional container processes via 'runc exec' to be ptraced by the pid 1 of the container. This allows the main processes of the container, if running as root, to gain access to file-descriptors of these new processes during the initialization and can lead to container escapes or...

CVE-2016-3914: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in providers/telephony/MmsProvider.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows attackers to gain privileges via a crafted application that modifies a database between two open...

CVE-2016-7777: Concurrent Execution using Shared Resource with Improper Synchronization

Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it...

CVE-2016-4954: Concurrent Execution using Shared Resource with Improper Synchronization

The processpacket function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service peer-variable modification by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication...

CVE-2014-5195: Concurrent Execution using Shared Resource with Improper Synchronization

Unity before 7.2.3 and 7.3.x before 7.3.1, as used in Ubuntu, does not properly take focus of the keyboard when switching to the lock screen, which allows physically proximate attackers to bypass the lock screen by 1 leveraging a machine that had text selected when locking or 2 resuming from a...

CVE-2014-1441: Concurrent Execution using Shared Resource with Improper Synchronization

Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service reachable assertion and crash via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice...

CVE-2014-2243: Concurrent Execution using Shared Resource with Improper Synchronization

includes/User.php in MediaWiki before 1.19.12, 1.20.x and 1.21.x before 1.21.6, and 1.22.x before 1.22.3 terminates validation of a user token upon encountering the first incorrect character, which makes it easier for remote attackers to obtain access via a brute-force attack that relies on timin...

CVE-2014-1921: Concurrent Execution using Shared Resource with Improper Synchronization

parcimonie before 0.8.1, when using a large keyring, sleeps for the same amount of time between fetches, which allows attackers to correlate key fetches via unspecified vectors...

CVE-2012-5660: Concurrent Execution using Shared Resource with Improper Synchronization

abrt-action-install-debuginfo in Automatic Bug Reporting Tool ABRT 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."...

CVE-2013-1279: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that...

CVE-2013-1278: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that...