Lucene search
+L

5893 matches found

Positive Technologies
Positive Technologies
•added 2022/11/15 12:00 a.m.•9 views

PT-2022-37992

Уязвимость функции kcm splice read модуля net/kcm/kcmsock.c реализации сетевых функций ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

7.8CVSS0.00166EPSS
SaveExploits0References17
BDU FSTEC
BDU FSTEC
•added 2022/11/14 12:00 a.m.•21 views

Windows Photo Import API Privilege Escalation

The vulnerability of the Windows Photo Import API of the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...

7CVSS7.2AI score0.00794EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/11/14 12:00 a.m.•21 views

Windows Storage Services Privilege Escalation

The vulnerability of the Windows operating system’s Storage Services is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access and increase their privileges...

7CVSS7.1AI score0.0043EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2022/11/11 7:15 p.m.•42 views

CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

7.8CVSS6.9AI score0.00492EPSS
SaveExploits0References4
Prion
Prion
•added 2022/11/11 7:15 p.m.•36 views

Design/Logic Flaw

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

4.4CVSS7.5AI score0.00492EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/11/11 12:00 a.m.•22 views

Microsoft Windows PPTP Code Execution

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially craft...

8.1CVSS8.2AI score0.01903EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/11 12:00 a.m.•155 views

CVE-2022-41882

The CVE-2022-41882 entry concerns the Nextcloud Desktop Client. Affected product: Nextcloud Desktop Client prior to version 3.6.1. Root cause: clicking a nc://open/ link for a malicious shared file, when the file is locally synced or the virtual filesystem is enabled, can cause the default editor...

7.8CVSS7AI score0.00492EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
•added 2022/11/11 12:00 a.m.•744 views

CVE-2022-41882

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...

7.8CVSS7AI score0.00492EPSS
SaveExploits0
Veracode
Veracode
•added 2022/11/10 12:44 a.m.•35 views

Denial Of Service (DoS)

389-ds-base is vulnerable to Denial Of Service DoS. The vulnerability exists when the content synchronization plugin is enabled, allowing an attacker crash the application through the null pointer dereference by providing a maliciously crafted query...

6.5CVSS6.3AI score0.01569EPSS
SaveExploits1References11Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•10 views

CVE-2022-44551: Concurrent Execution using Shared Resource with Improper Synchronization

The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability...

9.8CVSS6AI score0.00459EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•6 views

CVE-2022-41116: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...

5.9CVSS5.7AI score0.01075EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/11/09 12:00 a.m.•16 views

Apache Tomcat Privilege Escalation

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS7.7AI score0.00692EPSS
SaveExploits0References14Affected Software19
BDU FSTEC
BDU FSTEC
•added 2022/11/09 12:00 a.m.•26 views

Microsoft Windows PPTP Code Execution

The vulnerability of the Point to Point Tunneling Protocol PPTP network protocol implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.1AI score0.01434EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/11/09 12:00 a.m.•22 views

Apache Tomcat Synchronization Unauthorized Access

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

3.7CVSS6.7AI score0.0028EPSS
SaveExploits0References8Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•6 views

CVE-2022-38014: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Subsystem for Linux WSL2 Kernel Elevation of Privilege Vulnerability...

7CVSS5.7AI score0.00346EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•9 views

CVE-2022-41118: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Scripting Languages Remote Code Execution Vulnerability...

7.5CVSS5.8AI score0.01182EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•5 views

CVE-2022-41039: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

8.1CVSS5.8AI score0.01141EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•6 views

CVE-2022-41088: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

8.1CVSS5.8AI score0.01033EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•3 views

CVE-2022-41086: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Group Policy Elevation of Privilege Vulnerability...

6.4CVSS5.7AI score0.00269EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•4 views

CVE-2022-41093: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

7.8CVSS5.7AI score0.00313EPSS
SaveExploits0References2
Rows per page
Query Builder