cPanel Competitive Conditions Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A Competing Conditions Issue vulnerability exists in versions of cPanel prior to 68.0.27. The vulnerability stems from improper...

Wind River Systems VxWorks Competitive Conditions Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A competitive conditions issue vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from improper handling of concurrent access when concurrent code requires mutually exclusi...

The vulnerability in the implementation of the Siemens R3964 driver’s code in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the Siemens R3964 driver implementation, located in the Linux kernel’s drivers/tty/nr3964.c file, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

GitLab Competitive Conditions Vulnerability

GitLab is a Ruby on Rails development , Git version control system project repository application . The program can be used to access the contents of the project's files, commit history, bug lists, and more. A competitive conditions vulnerability exists in GitLab versions 8.17 and later Community...

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation lies in synchronization errors when using shared resources (“Race Conditions”), allowing a attacker to execute arbitrary code.

The vulnerability of VMware ESXi, VMware Fusion, and Vmware Workstation hypervisors is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to execute arbitrary code by using a virtual USB controller...

The vulnerability of the nginx web server module in Phusion Passenger, related to the simultaneous use of shared resources and synchronization errors, allows attackers to gain access to confidential data.

The vulnerability of the nginx web server module in Phusion Passenger is related to the simultaneous use of a shared resource and synchronization errors when the passengerinstanceregistrydir configuration is not set strictly enough. Exploiting this vulnerability can allow an attacker to gain acce...

The vulnerability of Systemd demons, related to the simultaneous use of shared resources and synchronization errors, allows a perpetrator to trigger a service failure.

The vulnerability of Systemd relates to the simultaneous use of shared resources and synchronization errors. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Linux kernel competitive conditions issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. The kernel contains a Competitive Condition Problem vulnerability that arises from improper handling of concurrent access when concurrent code requires mutually...

Microsoft Windows BasicRender Driver Race Condition Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within processing of th...

CVE-2017-8148

Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the race condition cause null pointer accessing during the application access share...

The vulnerability of the android operating system’s sound driver ioctl handler allows a hacker to cause the device to freeze or fail to function properly.

The vulnerability of the Android operating system’s sound driver ioctl handler arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause the device to become unresponsive or to fail to function properly...

The vulnerability of the TrustZone component in the Android operating system allows a hacker to simplify the process of decoding messages.

The vulnerability of the TrustZone component in the Android operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can enable a remote attacker to simplify the process of decoding messages...

The vulnerability in the net/packet/af_packet.c component of the Linux operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability in the net/packet/afpacket.c component of the Linux operating system exists due to insufficient checking of resource states when resources are allowed to be shared among multiple processes. Exploiting this vulnerability can allow an attacker to increase their privileges or cause...

The vulnerability of the ion_ioctl function (drivers/staging/android/ion/ion.c) in the Linux operating system, which allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the ionioctl function drivers/staging/android/ion/ion.c in the Linux operating system exists due to insufficient checking of resource status when resources are allowed to be shared. Exploiting this vulnerability can allow a malicious actor to increase their privileges or caus...

The vulnerability of the OpenSSL library, which allows a hacker to trigger a service failure

The vulnerability in the ssl/s3clnt.c function of the OpenSSL library arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to trigger a service denial game-of-thrones behavior and subsequent release by using a specially created...

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure or increase their privileges.

The Linux operating system contains a vulnerability related to errors in implementing access to shared resources. Exploiting this vulnerability allows for denial of service or increases privileges by creating special requests to the shared resources...

Vulnerabilities in iOS and Mac OS X operating systems, which allow attackers to obtain confidential information from the kernel’s memory

The vulnerability of the Disk Images subsystem in iOS and Mac OS X operating systems exists due to insufficient checks on the status of resources when they are potentially shared among multiple processes. Exploiting this vulnerability could allow a malicious actor to obtain confidential informati...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code in a privileged context

The vulnerability of the kernel in iOS and Mac OS X operating systems exists due to insufficient checking of resource states when resources are allowed to be shared among processes. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context using a...

Vulnerability of Firefox and Firefox ESR browsers, which allows attackers to circumvent existing access restrictions

The vulnerability of Firefox and Firefox ESR browsers is related to the improper use of shared resources between different sources. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions by avoiding the check-step during requests...

The vulnerability of the Firefox browser, which allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the WorkerPrivate::NotifyFeatures function in the Firefox browser is caused by synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure due to errors in the implementation ...