Lucene search
+L

4256 matches found

BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.12 views

Vulnerability of the kcm_tx_work() function (net/kcm/kcmsock.c) in Linux operating system kernels, allowing a hacker to execute arbitrary code

The vulnerability of the kcmtxwork function net/kcm/kcmsock.c in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS7AI score0.00228EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.11 views

The vulnerability in the driver/char/pcmcia/scr24x_cs.c component of Linux kernel allows a hacker to execute arbitrary code.

The vulnerability in the drivers/char/pcmcia/scr24xcs.c component of Linux kernel systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

6.4CVSS7.3AI score0.00308EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.10 views

The vulnerability of the XFRM subsystem in the Linux operating system allows a hacker to execute arbitrary code, cause a service failure, or otherwise affect the system.

The vulnerability of the XFRM subsystem in the Linux operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code, cause service failures, or have other adverse effects on the system...

7CVSS7.1AI score0.00206EPSS
SaveExploits0References44Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/12/19 12:0 a.m.16 views

The vulnerability of the Windows Error Reporting error reporting service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting registration service in Windows operating systems is related to synchronization errors when using a shared resource “Race Conditions”. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.2AI score0.003EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.12 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...

8.1CVSS8AI score0.01127EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.15 views

The vulnerability of the DirectX Graphics Kernel Driver (DXGKRNL) on Microsoft Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.5AI score0.00594EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/16 12:0 a.m.8 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted requests...

8.1CVSS8AI score0.0107EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2022/12/13 4:9 p.m.6 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01251EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/12/07 11:55 a.m.7 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01251EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/12/07 12:0 a.m.20 views

PT-2022-7702

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the simultaneous execution of commands using a shared resource with incorrect synchronization in the Linux kernel's drm/vmwgfx component. This can lead to a crash...

5.5CVSS6.3AI score0.00235EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.16 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to enhance their privileges within the system.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...

7CVSS7.2AI score0.05382EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/12/07 12:0 a.m.43 views

Amazon Linux 2 : 389-ds-base (ALAS-2022-1879)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1879 advisory. A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL...

6.5CVSS6.7AI score0.01251EPSS
SaveExploits1References3
Amazon
Amazon
added 2022/12/06 12:0 a.m.36 views

Medium: 389-ds-base

Issue Overview: A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. CVE-2022-2850 Affected Packages...

6.5CVSS6.7AI score0.01251EPSS
SaveExploits1
Citrix
Citrix
added 2022/12/06 12:0 a.m.11 views

Mac OS input source not synchronized correctly to remote applications or desktops

With Citrix Workspace app for Mac 2212 or previous version on Mac OS 13, you might encounter problems that client input sources cannot be synchronized correctly to your remote applications or desktops. For example, for Mac OS 13, the default English input source is English - ABC, while in the pas...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.9 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Microsoft Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.7AI score0.00298EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.6 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01095EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.12 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPTP) network protocol for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01184EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/30 12:0 a.m.10 views

The vulnerability of Firefox browser, related to synchronization errors when using a common resource, allows attackers to disclose protected information.

The vulnerability of Firefox browsers is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

7.8CVSS7.1AI score0.00391EPSS
SaveExploits0References8Affected Software3
RedHat Linux
RedHat Linux
added 2022/11/29 2:5 p.m.6 views

389-ds-base: SIGSEGV in sync_repl

A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...

6.5CVSS5.8AI score0.01251EPSS
SaveExploits1References4
Code423n4
Code423n4
added 2022/11/28 12:0 a.m.8 views

Potential PirexReward's producerTokens's rewardToken unsynced with PirexGmx rewardToken can miss calculate the actual reward for user

Lines of code Vulnerability details Impact Potential PirexReward's producerTokens's rewardToken unsynced with PirexGmx rewardToken can miss calculate the actual reward for user Proof of Concept PirexReward initialization does not include rewardToken initialization for producerTokens. Meanwhile...

6.8AI score
SaveExploits0
Rows per page
Query Builder