Lucene search
+L

809 matches found

Positive Technologies
Positive Technologies
added 2023/06/07 12:0 a.m.3 views

PT-2023-7323 · Unknown +5 · Tang Server +5

Name of the Vulnerable Software and Affected Versions: Tang server affected versions not specified Description: A race condition exists in the Tang server functionality for key generation and key rotation, resulting in a small time window where Tang private keys become readable by other processes...

5.3CVSS6.4AI score0.00568EPSS
SaveExploits1References34
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.16 views

The vulnerability of the ksmbd module in Linux operating systems allows attackers to compromise the integrity, accessibility, and confidentiality of protected information, and execute arbitrary code.

The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to compromise the integrity, availability, and confidentiality of protected information, and to execute arbitra...

8.1CVSS7.3AI score0.02937EPSS
SaveExploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:0 a.m.12 views

The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.1AI score0.00973EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:0 a.m.8 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.00924EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/11 12:0 a.m.13 views

The vulnerability of the Windows OLE operating system technology, which allows a hacker to execute arbitrary code.

The vulnerability of the Windows OLE operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.2AI score0.84386EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.8 views

PT-2023-2626 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows OLE technology, which can be exploited by a remote attacker to execute arbitrary code. This...

8.1CVSS9.5AI score0.84386EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.4 views

PT-2023-2709 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Lightweight Directory Access Protocol LDAP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Lightweight Directory Access Protocol...

8.1CVSS9.6AI score0.00973EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.4 views

PT-2023-2691 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows Graphics Component. This can allow an attacker to elevate their privileges. The...

7CVSS9.2AI score0.00339EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/05/02 12:0 a.m.31 views

Siemens SIMATIC NET CP 443-1 OPC UA Concurrent Execution Using Shared Resource with Improper Synchronization (CVE-2016-4955)

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service peer-variable clearing and association outage by sending 1 a spoofed crypto-NAK packet or 2 a packet with an incorrect MAC value at a certain time. This plugin only works with Tenable.ot...

5.9CVSS6.2AI score0.08771EPSS
SaveExploits0References17
BDU FSTEC
BDU FSTEC
added 2023/05/02 12:0 a.m.7 views

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to cause service interruptions...

5.8CVSS5.9AI score0.00211EPSS
SaveExploits0References3Affected Software3
Tenable Nessus
Tenable Nessus
added 2023/05/02 12:0 a.m.26 views

Siemens TIM 4R-IE Devices Concurrent Execution Using Shared Resource with Improper Synchronization (CVE-2016-4954)

The processpacket function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service peer- variable modification by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication...

7.5CVSS6.3AI score0.13208EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 2023/05/02 12:0 a.m.35 views

Siemens SCALANCE XCM332 Concurrent Execution Using Shared Resource with Improper Synchronization (CVE-2022-1729)

A race condition was found the Linux kernel in perfeventopen which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc. This plugin only works with Tenable.ot. Please...

7CVSS6.7AI score0.00317EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/04/27 12:0 a.m.10 views

The vulnerability of the Windows Clip Service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Clip Service on Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.2AI score0.00246EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.7 views

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

7.5CVSS7.9AI score0.00877EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.8 views

The vulnerability of Windows operating system DNS servers allows a perpetrator to execute arbitrary code.

The vulnerability of Windows operating system DNS servers is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.1CVSS7.3AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.9 views

The vulnerability of Windows operating system DNS servers allows a perpetrator to execute arbitrary code.

The vulnerability of Windows operating system DNS servers is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.1CVSS7.3AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:0 a.m.7 views

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.1AI score0.14979EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:0 a.m.9 views

The vulnerability of the Layer 2 Tunneling Protocol (L2TP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.1AI score0.14979EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.5 views

PT-2023-2304 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server versions affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows DNS Server, allowing a remote attacker to execute arbitrary code. This can...

7.1CVSS9.5AI score0.00836EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.4 views

PT-2023-2303 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows DNS Server, allowing remote attackers to execute arbitrary code and affect the system...

7.1CVSS9.6AI score0.00836EPSS
SaveExploits0References8
Rows per page
Query Builder