CVE-2020-11262: Concurrent Execution using Shared Resource with Improper Synchronization

A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice...

PT-2024-11282 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible use-after-free issue has been identified in the Linux kernel, specifically in the mhi pci remove function of the bus: mhi: pci generic driver. The driver's remove path calls...

The vulnerability of the data synchronization module at any time, triggered by user requests or by a special scheduler utility “LOCMAN Master Synchronization” of the engineering data and product lifecycle management system LOCMAN. This vulnerability is related to the unlimited loading of dangerous type files, allowing attackers to execute arbitrary code.

The vulnerability of the data synchronization module at any time, triggered by user requests or by special planning tools like “LOZMAN Master Synchronization” of the Engineering Data and Product Lifecycle management system LOZMAN, is related to the unlimited loading of dangerous files. Exploiting...

Nextcloud Resource Management Error Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A vulnerability exists in Nextcloud Resource Management Error Vulnerability. No detailed vulnerability details are provided at this time...

DEBIAN-CVE-2021-3514

When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...

CVE-2021-3514

When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

Design/Logic Flaw

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

CVE-2020-25668

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

CVE-2020-25668: Concurrent Execution using Shared Resource with Improper Synchronization

A flaw was found in Linux Kernel because access to the global variable fgconsole is not properly synchronized leading to a use after free in confontop...

The vulnerability of Firefox’s requestPointerLock() and setTimeout() methods allows a intruder to gain unauthorized access to protected information.

The vulnerabilities of the requestPointerLock and setTimeout methods in Firefox browsers stem from synchronization errors when using shared resources. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

Reinventing Cybersecurity Asset Management

Because security teams need their own asset inventory solution In conversations with our customers, it’s very clear that organizations need to establish a comprehensive view of their IT asset infrastructure because you can’t secure what you don’t know or can’t see. But that comprehensive view nee...

PT-2021-8285 · Linux · Linux

Name of the Vulnerable Software and Affected Versions: Linux affected versions not specified Description: The issue allows TCP firewalls to be circumvented by sending SYN packets with other flags set, such as the RST flag, which is not correctly discarded by the Linux TCP stack after firewalling...

The vulnerability of Web Render components in the Firefox web browser allows a hacker to execute arbitrary code within the system.

The vulnerability of Web Render components in the Firefox web browser arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code within the system...

PT-2024-11353

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a possible use-after-free in the HFC cleanup function of the mISDN module. This occurs because the module's remove path calls del timer, which does not wait until...

PT-2024-11354 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible use-after-free in the ia module exit function of the atm: iphase module. This occurs because the module's remove path calls del timer, which does not...

Unspecified Vulnerability in Mozilla Rust (CNVD-2021-33046)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in the standard library in Rust prior to version 1.29.0, which stems from weak synchronization in the Arc::get mut method. This synchronization issue could lead to memory safety...

PT-2021-2883

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 88.0.1 Firefox for Android versions prior to 88.1.3 Description The issue is caused by synchronization errors when using shared resources in the Web Render components of the Firefox web browser. This could lead to...