Lucene search
+L

448 matches found

Positive Technologies
Positive Technologies
added 2023/05/09 12:0 a.m.11 views

PT-2023-2694 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in th...

8.1CVSS9.5AI score0.00924EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/05/02 12:0 a.m.14 views

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems allows a malicious individual to perform unauthorized deletion of files or directories.

The vulnerability of antivirus protection tools such as Avast Antivirus, AVG Antivirus, and Avira Security for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to perform unauthorized deletion of files...

6.5CVSS6.5AI score0.00167EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.10 views

The vulnerability affects the implementation of the Windows Network Protocol Point-to-Point Protocol over Ethernet (PPPoE) on Windows operating systems, allowing a hacker to execute arbitrary code.

The vulnerability of the Windows Network Protocol Point-to-Point Protocol over Ethernet PPPoE implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

7.1CVSS7.6AI score0.00394EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.4 views

PT-2023-2271 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Layer 2 Tunneling Protocol L2TP in Windows operating systems. This can allow a...

8.1CVSS9.2AI score0.14979EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.4 views

PT-2023-2288 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Layer 2 Tunneling Protocol L2TP in Windows operating systems. This can allow a...

8.1CVSS9.1AI score0.14979EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2023/03/21 12:0 a.m.39 views

Amazon Linux 2023 : microcode_ctl (ALAS2023-2023-055)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-055 advisory. 2024-06-06: CVE-2021-33117 was added to this advisory. Improper access control for some 3rd Generation IntelR XeonR Scalable Processors before BIOS version MR7, may allow a local attacker to...

5.5CVSS7.5AI score0.00347EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.13 views

The vulnerability of AMD Secure Processor’s microprogramming software is related to synchronization errors when using shared resources (“Race Conditions”). This allows a malicious actor to trigger a service failure.

The vulnerability of AMD Secure Processor ASP microprogramming software is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.7CVSS6.1AI score0.00179EPSS
SaveExploits0References5
F5 Networks
F5 Networks
added 2023/02/21 6:55 p.m.68 views

K32562936: Intel CPU vulnerabilities CVE-2020-24511 and CVE-2020-24512

Security Advisory Description CVE-2020-24511 Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access. CVE-2020-24512 Observable timing discrepancy in some IntelR Processors may allow an...

6.5CVSS5.5AI score0.00402EPSS
SaveExploits0
Veracode
Veracode
added 2023/02/19 4:59 p.m.28 views

Information Disclosure

intel-ucode is vulnerable to Information Disclosure. Improper isolation of shared resources may allow a privileged user to potentially enable information disclosure via local access...

6CVSS4.8AI score0.00249EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2023/02/16 9:15 p.m.1 views

DEBIAN-CVE-2022-38090

Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

4.4CVSS6AI score0.00249EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/16 9:15 p.m.3 views

ALPINE-CVE-2022-38090

Improper isolation of shared resources in some IntelR Processors when using IntelR Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access...

4.4CVSS5.8AI score0.00249EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/02/16 12:0 a.m.4 views

Intel Software Guard Extensions 安全漏洞

Intel Software Guard Extensions SGX is a set of security-related instructions from the U.S. company Intel that are built into some Intel central processors. It provides hardware-based memory encryption to isolate application-specific code and data in memory. A security vulnerability exists in...

6CVSS6.3AI score0.00249EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:1 a.m.2 views

SUSE CVE-2020-8698

Improper isolation of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

2.5CVSS5.9AI score0.0051EPSS
SaveExploits0References19
SUSE CVE
SUSE CVE
added 2023/02/15 3:50 a.m.2 views

SUSE CVE-2021-0145

Improper initialization of shared resources in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

6.5CVSS5.9AI score0.00332EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2023/02/13 12:0 a.m.7 views

The vulnerability of the KVM virtualization subsystem in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the KVM virtualization subsystem in Linux operating systems is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.00256EPSS
SaveExploits1References24Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:0 a.m.11 views

The execution environment vulnerability for JavaScript and TypeScript Deno, related to synchronization errors when using a shared resource, allows a perpetrator to execute arbitrary code.

The vulnerability of the execution environment for JavaScript and TypeScript in Deno is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.00601EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:0 a.m.15 views

The vulnerability of Zoom’s video conferencing software relates to synchronization errors when using shared resources, allowing attackers to execute arbitrary code with system privileges.

The vulnerability of Zoom’s video conferencing software is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges...

7.8CVSS7.7AI score0.00288EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/23 12:0 a.m.7 views

The vulnerability of the Windows GDI component in Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows GDI component in Microsoft Windows systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS7.2AI score0.00448EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.10 views

Vulnerability of the kcm_tx_work() function (net/kcm/kcmsock.c) in Linux operating system kernels, allowing a hacker to execute arbitrary code

The vulnerability of the kcmtxwork function net/kcm/kcmsock.c in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7AI score0.00218EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.8 views

The vulnerability of the pipe_resize_ring function in Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the piperesizering function in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7AI score0.00364EPSS
SaveExploits0References23Affected Software6
Rows per page
Query Builder