PT-2022-4404 · Hewlett Packard · Hp Laptop Bios

Name of the Vulnerable Software and Affected Versions: HP PC products affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the System Management Mode SMM implementation of the HP laptop BIOS firmware. This could allow an...

PT-2022-4122 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

PT-2022-4088 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Hyper-V hardware virtualization system. It may allow an attacker to execute arbitrary code ...

PT-2022-4278 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in th...

PT-2022-4421 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

PT-2022-4267 · Microsoft · Windows Sstp +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the implementation of the Secure Socket Tunneling Protocol SSTP in...

block.timestamp used as time proxy

Lines of code Vulnerability details block.timestamp used as time proxy Summary: Risk of using block.timestamp for time should be considered. Details: block.timestamp is not an ideal proxy for time because of issues with synchronization, miner manipulation and changing block times. This can be...

The vulnerability of the fromData method implementation in the October CMS system allows a perpetrator to execute arbitrary code.

The vulnerability of the fromData method implementation in October CMS is related to the use of a shared resource with incorrect synchronization. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

PT-2022-6792 · Red Hat +6 · 389-Ds-Base +7

Name of the Vulnerable Software and Affected Versions: 389-ds-base affected versions not specified Description: A flaw in the Content Synchronization plugin of 389 Directory Server allows an authenticated attacker to cause a denial of service by exploiting a NULL pointer dereference using a...

The implementation of the wchp/wchc command in the centralized service for managing configuration information, naming, distributed synchronization, and providing group services via Apache ZooKeeper is vulnerable. This vulnerability stems from the lack of authentication for the critical function, allowing a malicious actor operating remotely to cause service failures.

The vulnerability of the wchp/wchc command implementation in the centralized service for managing configuration information, naming, distributed synchronization, and providing group services in Apache ZooKeeper is related to the lack of authentication for the critical function. Exploiting this...

[SECURITY] Fedora 36 Update: syncthing-1.20.3-2.fc36

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

The vulnerability of the DNS Server component of the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

[Important] [Security] Virtuozzo ReadyKernel patch 144.1 for Virtuozzo Hybrid Server 7.0, 7.5

The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.x. NOTE: No more updates are planned for the kernels 3.10.0-1127.8.2.vz7.158.8 and 3.10.0-1127.18.2.vz7.163.46. Vulnerability id: VSTOR-55377...

The vulnerability of Intel SSD microprogramming software lies in the simultaneous execution using a shared resource with improper synchronization, which allows a hacker to cause service failure.

The vulnerability of Intel SSD microprogramming software is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

USN-5231-1 389-ds-base vulnerabilities

It was discovered that 389 Directory Server presented to users, during authentication, an error message which could be used to discover if a certain LDAP DN existed or not. A remote unauthenticated attacker could possibly use this to check the existence of an entry in a LDAP database and expose...

Samsung score drive competition condition loophole

Samsung score drive is a driver for Samsung mobile devices. samsung score drive is vulnerable to a contention condition. The vulnerability stems from the lack of proper synchronization points and can be exploited by attackers to perform malicious operations...

PT-2022-3864 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows DNS Server component. This allows a remote attacker to execute arbitrary code on the...

PT-2022-4075 · Microsoft · Windows Connected Devices Platform Service +1

Name of the Vulnerable Software and Affected Versions: Windows Connected Devices Platform Service CDPSvc affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Connected Devices Platform Service CDPSvc of Windows operating...

SAMSUNG Mobile devices score driver 安全漏洞

Samsung score drive is a driver for Samsung mobile devices. samsung score drive is vulnerable to a contention condition. The vulnerability stems from the lack of proper synchronization points and can be exploited by attackers to perform malicious operations...

The vulnerability of Xen hypervisors arises from synchronization errors when using shared resources, allowing a perpetrator to execute arbitrary code.

The vulnerability of Xen hypervisors is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...