Lucene search
+L

4247 matches found

Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.6 views

PT-2022-5428 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Storage Services. Exploitation of this issue may allow an attacker to gain unauthorized access and...

7CVSS9.4AI score0.00375EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.6 views

IBM Navigator Mobile 安全漏洞

IBM Navigator Mobile is an application from International Business Machines IBM, Inc. Used with a local IBM P8 repository, it extends synchronization capabilities to business content in services that offer a full range of collaboration options. A security vulnerability exists in IBM Navigator...

5.5CVSS5.2AI score0.0017EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.3 views

PT-2022-5596 · Microsoft · Windows Point-To-Point Tunneling Protocol +1

Name of the Vulnerable Software and Affected Versions: Windows Point-to-Point Tunneling Protocol affected versions not specified Description: The issue is related to the implementation of the Point-to-Point Tunneling Protocol PPTP in Windows operating systems, specifically concerning...

8.1CVSS9.7AI score0.01095EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.3 views

PT-2022-5405 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point-to-Point Tunneling Protocol PPTP in Microsoft Windows. This can be exploite...

8.1CVSS9.6AI score0.01441EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.3 views

PT-2022-5368 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Point-to-Point Tunneling Protocol PPTP in Microsoft Windows. This can allow a...

8.1CVSS9.6AI score0.01086EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.5 views

PT-2022-5302 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the implementation of the Point-to-Point Tunneling Protocol PPTP in Windows. This allows a remote attacker to...

8.1CVSS9.6AI score0.01271EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2022/10/10 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for 389-ds-base (EulerOS-SA-2022-2437)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.7AI score0.01251EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/10/08 12:0 a.m.38 views

EulerOS 2.0 SP5 : 389-ds-base (EulerOS-SA-2022-2437)

According to the versions of the 389-ds-base packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer...

6.5CVSS6.6AI score0.01251EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/10/04 12:0 a.m.7 views

The vulnerability of Microsoft Edge browser on Windows operating systems, related to synchronization errors when using a shared resource, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge browser on Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

8.1CVSS6.9AI score0.01318EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/03 12:0 a.m.4 views

PT-2022-4901 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Microsoft Edge, allowing a remote attacker to conduct spoofing attacks. Recommendations:...

7.6CVSS9.3AI score0.01318EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/09/30 12:0 a.m.10 views

The vulnerability of the Display component in Qualcomm’s embedded software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Display component in Qualcomm’s embedded software lies in synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to cause system failures or execute arbitrary code...

8.4CVSS7.4AI score0.00084EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/09/30 12:0 a.m.21 views

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to synchronization errors when using common resources. Exploiting this vulnerability can allow attackers to cause service failures or execute arbitrary code...

7.8CVSS7.4AI score0.00087EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/09/28 12:0 a.m.9 views

PT-2022-5375 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat affected versions not specified Pandora FMS version 7.65 Description: The issue concerns errors in synchronization when using a shared resource in Apache Tomcat, potentially allowing a remote attacker to gain unauthorized access...

7.5CVSS7AI score0.11796EPSS
SaveExploits16References12
CNVD
CNVD
added 2022/09/28 12:0 a.m.49 views

Bifrost Licensing Issue Vulnerability

Bifrost is a middleware package that synchronizes MySQL MariaDB binary log data to other types of databases.Bifrost 1.8.6-release and earlier versions are vulnerable to authorization issues, which stem from its vulnerability to authentication bypass when using HTTP basic authentication, which can...

8.5CVSS3.3AI score0.00945EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/09/26 1:15 p.m.8 views

CVE-2022-39219 Bifrost users using basic authntication can bypass write permission limit

Bifrost is a middleware package which can synchronize MySQL/MariaDB binlog data to other types of databases. Versions 1.8.6-release and prior are vulnerable to authentication bypass when using HTTP basic authentication. This may allow group members who only have read permissions to write requests...

8.5CVSS8.8AI score0.00945EPSS
SaveExploits1References3
NVD
NVD
added 2022/09/22 5:15 p.m.20 views

CVE-2021-39190

The SCCM plugin for GLPI is a plugin to synchronize computers from SCCM version 1802 to GLPI. In versions prior to 2.3.0, the Configuration page is publicly accessible in read-only mode. This issue is patched in version 2.3.0. No known workarounds exist...

5.3CVSS0.00486EPSS
SaveExploits0References2
Redos
Redos
added 2022/09/19 12:0 a.m.85 views

ROS-20220919-01

A vulnerability in the Linux kernel's implementation of the CAN BCM protocol is caused by synchronization errors when utilizing a shared resource. Exploitation of the vulnerability could allow an attacker to escalate their privileges Vulnerability of the legacyparseparam function of the Linux...

9CVSS8.3AI score0.78684EPSS
SaveExploits68
BDU FSTEC
BDU FSTEC
added 2022/09/16 12:0 a.m.11 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to synchronization errors when using a common resource, allowing an attacker to disclose protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to synchronization errors when using a common resource. Exploiting these vulnerabilities can allow an attacker, operating remotely, to disclose sensitive information...

5.4CVSS6.7AI score0.01867EPSS
SaveExploits1References12Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:0 a.m.11 views

The vulnerability of the OverlayFS subsystem in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the OverlayFS subsystem in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS6.8AI score0.00216EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:0 a.m.10 views

The vulnerability affects Unix extensions such as SMB1 and NFS, which are components of network communication software like Samba. This vulnerability allows attackers to compromise data integrity.

The vulnerability of Unix extensions like SMB1 and NFS network communication software such as Samba is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability allows an attacker to compromise data integrity...

2.5CVSS6.5AI score0.00376EPSS
SaveExploits1References8Affected Software4
Rows per page
Query Builder