The vulnerability in the implementation of the Siemens R3964 driver’s code in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the Siemens R3964 driver implementation, located in the Linux kernel’s drivers/tty/nr3964.c file, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the daemon/archive.go component of the automation tool for deploying and managing applications in Docker-enabled environments allows a malicious individual to escalate their privileges and gain access to read and write file operations.

The vulnerability in the daemon/archive.go component of the automation tool for deploying and managing applications in Docker-enabled environments is related to synchronization errors when using a shared resource. This “race condition” allows an attacker to increase their privileges and gain acce...

Nextcloud: User can delete data in shared folders he's not autorized to access

Steps to reproduce 1. create a group folder named TEST and share with "admin group" and "test group", marking the advanced permission flag 2. create two folders inside the main share: visible and invisible 3. inside "invisible" folder create a test file let's say something like "test.txt" 4. set...

Command Execution Vulnerability in zzzzphp

zzphp using PHP+mysql/access/sqlite free station building system, support for cell phone automatic synchronization. zzzphp there is a command execution vulnerability , attackers into the background management system , you can use the vulnerability to indirectly execute system commands...

CVE-2019-13178: Concurrent Execution using Shared Resource with Improper Synchronization

modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set...

CVE-2018-20810

Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure PCS 8.3RX before 8.3R2 and Pulse Policy Secure PPS 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices...

CVE-2018-20810

Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure PCS 8.3RX before 8.3R2 and Pulse Policy Secure PPS 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices...

Session fixation

Session data between cluster nodes during cluster synchronization is not properly encrypted in Pulse Secure Pulse Connect Secure PCS 8.3RX before 8.3R2 and Pulse Policy Secure PPS 5.4RX before 5.4R2. This is not applicable to PCS 8.1RX, PPS 5.2RX, or stand-alone devices...

CVE-2018-15555: Improper Synchronization

On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers...

CVE-2019-5840: Concurrent Execution using Shared Resource with Improper Synchronization

Incorrect security UI in popup blocker in Google Chrome on iOS prior to 75.0.3770.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

Weak Password Vulnerability in Isthmus Electronic Document Security Management System

Electronic document security management system referred to as: CDG is an electronic document security protection software. Document security management system background configuration system there is a default password, the attacker can enter the background through the default password to obtain...

CVE-2018-13909: Concurrent Execution using Shared Resource with Improper Synchronization

Metadata verification and partial hash system calls by bootloader may corrupt parallel hashing state in progress resulting in unexpected behavior in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

Citrix SDWAN High Availability FAQ

Q: What is the Platform and License Requirement for SDWAN High availability? The Platform and licenses should be same for both devices which participates in HA Q: What protocol and port numbers used by SDWAN for HA communication? SDWAN uses Citrix Proprietary protocol for HA communication and UDP...

PT-2020-8985

Name of the Vulnerable Software and Affected Versions ntp versions 4.2.8p10 through 4.2.8p13 Description The issue allows remote attackers to prevent a broadcast client from synchronizing its clock with a broadcast NTP server via soofed mode 3 and mode 5 packets. The attacker must either be a par...

CVE-2019-12448: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in GNOME gvfs 1.29.4 through 1.41.2. daemon/gvfsbackendadmin.c has race conditions because the admin backend doesn't implement queryinfoonread/write...

OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0018) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/mds: Add empty commit for CVE-2019-11091 Konrad Rzeszutek Wilk Orabug: 29721935 CVE-2019-11091 - x86/microcode: Add loader version file in debugfs Boris Ostrovsky Orabug: 29754165 - x86/microcode:...

EulerOS Virtualization 3.0.1.0 : kernel (EulerOS-SA-2019-1475)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The skbflowdissect function in net/core/flowdissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denia...

CVE-2019-5675

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior a...

PT-2019-4575

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display driver software for Windows all versions Description The issue is related to errors in synchronizing shared data, such as static variables across threads, in the DxgkDdiEscape function of the NVIDIA graphics processo...

CVE-2019-5675: Improper Synchronization

NVIDIA Windows GPU Display driver software for Windows all versions contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where the product does not properly synchronize shared data, such as static variables across threads, which can lead to undefined behavior a...