Lucene search
K

185 matches found

CNNVD
CNNVD
added 2026/06/09 12:0 a.m.1 views

Microsoft Windows Push Notifications 竞争条件问题漏洞

Microsoft Windows Push Notifications is a push notification service provided by the American company Microsoft. It provides a reliable way to deliver new updates. There are vulnerabilities related to competition conditions in Microsoft Windows Push Notifications. Attackers can exploit these...

7.8CVSS5.4AI score0.00152EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/06/09 12:0 a.m.3 views

Microsoft Remote Desktop Client 竞争条件问题漏洞

Microsoft Remote Desktop Client is a remote desktop client developed by Microsoft Corporation. There is a vulnerability related to competition conditions in Microsoft Remote Desktop Client. The following products and versions are affected: Remote Desktop client for Windows Desktop, Windows Server...

7.5CVSS5.4AI score0.00432EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/05/26 7:30 p.m.13 views

Pterodactyl has a database resource limit bypass via race condition in Client API

Summary The Pterodactyl Client API has a logic flaw that lets users bypass their assigned limits for database allocations. This happens because the database locking mechanism used in the controllers is totally broken and doesn't actually lock anything. Details Inside DatabaseController.php, the...

2.3CVSS5.9AI score0.00348EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.7 views

PT-2026-42812

Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description A race condition in the magick -distribute-cache service allows a remote attacker to hijack a file descriptor within the server process. Recommendations At the moment, there is no...

4.1CVSS5.5AI score0.00126EPSS
Exploits0References39
CNNVD
CNNVD
added 2026/05/20 12:0 a.m.7 views

ISC BIND 9 竞争条件问题漏洞

ISC BIND 9 is a domain name system software developed by the ISC organization. ISC BIND 9 has a race condition vulnerability, which stems from race conditions that lead to reusing resources after release, potentially causing undefined behaviors. The following versions are affected: 9.20.0 to...

7.5CVSS5.8AI score0.01222EPSS
Exploits0References3
OSV
OSV
added 2026/05/18 8:57 a.m.6 views

BIT-TOMCAT-2025-52434 Apache Tomcat: APR/Native Connector crash leading to DoS

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0 through...

7.5CVSS7.3AI score0.01819EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/30 12:0 a.m.1 views

AlmaLinux 9 : PackageKit (ALSA-2026:11504)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:11504 advisory. PackageKit: race condition vulnerability leads to arbitrary package installation as root CVE-2026-41651 Tenable has extracted the preceding description block...

8.8CVSS5.6AI score0.00413EPSS
Exploits10References3
NVD
NVD
added 2026/04/29 5:16 a.m.1 views

CVE-2026-35155

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access...

7.1CVSS0.0022EPSS
Exploits0References1
CVE
CVE
added 2026/04/27 2:35 a.m.31 views

CVE-2026-3006

CVE-2026-3006 is a race-condition vulnerability whose description states it can allow triggering a kernel heap overflow, potentially enabling local privilege escalation. A PT-Security advisory indicates WinFsp 2026 Beta1 includes an important fix for this vulnerability, recommending upgrading to ...

7CVSS5.2AI score0.00091EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/26 12:0 a.m.4 views

EVerest 竞争条件问题漏洞

EVerest is an open-source firmware for electric vehicle charging stations developed by EVerest. Versions prior to EVerest 2026.02.0 contained a race condition vulnerability, which was caused by data competition and could lead to mapping or queue corruption...

7CVSS5.8AI score0.0014EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/13 12:0 a.m.5 views

WordPress plugin TeraWallet – For WooCommerce 竞争条件问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.00211EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/06 2:37 p.m.3 views

CVE-2026-28551

Race condition vulnerability in the device security management module. Impact: Successful exploitation of this vulnerability may affect availability...

4.7CVSS5.8AI score0.00061EPSS
Exploits0References1
Amazon
Amazon
added 2026/03/05 12:0 a.m.6 views

Important: nodejs22

Issue Overview: A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be...

8.8CVSS5AI score0.00449EPSS
Exploits3
CNNVD
CNNVD
added 2026/01/15 12:0 a.m.4 views

Juniper Networks Junos OS security vulnerabilities

Juniper Networks Junos OS is a network operating system specifically designed for hardware devices used by Juniper Networks. This operating system provides secure programming interfaces and the Junos SDK. Vulnerabilities exist in versions of Juniper Networks Junos OS prior to 21.2R3-S10, 21.4R3-S...

6.8CVSS5.8AI score0.00103EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 12:39 p.m.5 views

CVE-2023-43741

A time-of-check-time-of-use race condition vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to bypass a symbolic link check for the PIPELINEPATH variable in the fix-buildkite-agent-builds-permissions script...

7CVSS6.7AI score0.00195EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:0 a.m.4 views

PT-2025-51762

Name of the Vulnerable Software and Affected Versions NVIDIA Resiliency Extension for Linux affected versions not specified Description The NVIDIA Resiliency Extension for Linux has an issue in its checkpointing core that allows an attacker to create a race condition. Exploitation could result in...

7.8CVSS5.3AI score0.00108EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.3 views

PT-2025-49519

Name of the Vulnerable Software and Affected Versions versions prior to 2025-66322 Description A multi-thread race condition exists in the camera framework module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information about a newer...

5.1CVSS6.3AI score0.00056EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-23134

Malware in sbrugna...

8.1CVSS8AI score0.00789EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-16890

Malware in sbrugna...

7.5CVSS8.4AI score0.00914EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-10524

Malware in sbrugna...

8.8CVSS8.3AI score0.01737EPSS
Exploits0References4
Rows per page
Query Builder