Lucene search
+L

5814 matches found

CNVD
CNVD
•added 2017/08/23 12:00 a.m.•14 views

Cyrus IMAP Arbitrary File Write Vulnerability

Cyrus IMAP is a free, open source Unix and Linux-based operating system for supporting IMAP Interactive Mail Access Protocol protocol mail server . A security vulnerability exists in Cyrus IMAP versions prior to 3.0.3. The vulnerability can be exploited by a remote attacker to overwrite arbitrary...

6.5CVSS6.5AI score0.01227EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2017/08/22 12:00 a.m.•9 views

Important: Red Hat Bug Fix Advisory: redhat-virtualization-host bug fix, and enhancement update for RHV 4.1.5

Updated redhat-virtualization-host packages are now available. The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts RHVH are installed using a special build of R...

8.8CVSS7.2AI score0.04204EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2017/08/21 12:00 a.m.•59 views

Virtuozzo 7 : readykernel-patch (VZA-2017-071)

According to the version of the vzkernel package and the readykernel-patch installed, the Virtuozzo installation on the remote host is affected by the following vulnerabilities : - A race condition issue leading to a use-after-free flaw was found in the way the raw packet sockets are implemented ...

7.8CVSS6.9AI score0.20797EPSS
SaveExploits19References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/18 12:00 a.m.•5 views

CVE-2017-8257: Concurrent Execution using Shared Resource with Improper Synchronization

In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sderotator debug interface for register reading with multiple processes, one process can free the debug buffer while another process still has the debug buffer in use...

7.8CVSS6AI score0.00283EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2017/08/11 8:18 a.m.•61 views

CVE-2017-1000111

A race condition issue was found in the way the raw packet socket implementation in the Linux kernel networking subsystem handled synchronization. A local user able to open a raw packet socket requires the CAPNETRAW capability could use this to waste resources in the kernel's ring buffer or...

7.8CVSS0.9AI score0.00374EPSS
SaveExploits0References1
Citrix
Citrix
•added 2017/08/10 12:00 a.m.•15 views

Citrix Hypervisor unable to sync to NTP server

Unable to sync to NTP server...

7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/09 12:00 a.m.•6 views

CVE-2017-0727: Concurrent Execution using Shared Resource with Improper Synchronization

A elevation of privilege vulnerability in the Android media framework libgui. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-33004354...

7.8CVSS5.8AI score0.00283EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/08/07 12:00 a.m.•4 views

PT-2017-3826

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2 Description The issue is caused by synchronization errors when using a shared resource in the libgui library of the Android operating system. This allows a remote attacker to potentially elevate their...

7.8CVSS0.00283EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2017/07/31 12:00 a.m.•38 views

Juniper Junos SRX Cluster Synchronization Failover Errors (JSA10806)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by a flaw in the handling of cluster synchronization and failover operations whenever the root account has been locked out. An unauthenticated, remote attacker can exploit this, via a seri...

5.3CVSS5.7AI score0.00877EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/25 12:00 a.m.•5 views

CVE-2015-7543: Concurrent Execution using Shared Resource with Improper Synchronization

aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory...

7CVSS5.8AI score0.00245EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/07/24 12:00 a.m.•5 views

PT-2021-8573

Name of the Vulnerable Software and Affected Versions Rust versions prior to 1.19.0 Description The issue is related to a synchronization problem in the MutexGuard object within the standard library. This problem can lead to memory safety issues due to race conditions when MutexGuards are used...

5.9CVSS0.00799EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/07/17 12:00 a.m.•6 views

CVE-2017-11353: Concurrent Execution using Shared Resource with Improper Synchronization

yadm yet another dotfile manager 1.10.0 has a race condition related to the behavior of git commands in setting permissions for new files and directories, which potentially allows access to SSH and PGP keys...

5.9CVSS5.8AI score0.00777EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/06/30 12:00 a.m.•15 views

The vulnerability of the Secure Display component in the Android operating system allows a hacker to modify the common resources.

The vulnerability of the Secure Display component in the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to modify the shared resource...

7.6CVSS7.1AI score0.00447EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/06/30 12:00 a.m.•13 views

The vulnerability of the android operating system’s sound driver ioctl handler allows a hacker to cause the device to freeze or fail to function properly.

The vulnerability of the Android operating system’s sound driver ioctl handler arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause the device to become unresponsive or to fail to function properly...

7.6CVSS7.1AI score0.00274EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/06/30 12:00 a.m.•17 views

The vulnerability of the software interface of the TimeZone component in the Android operating system allows a hacker to modify general resources.

The vulnerability of the TimeZone component’s software interface in the Android operating system arises from synchronization errors when using a common resource. Exploiting this vulnerability allows a remote attacker to modify the common resource...

7.6CVSS7.2AI score0.00452EPSS
SaveExploits0References3
Veeam
Veeam
•added 2017/06/30 12:00 a.m.•21 views

Enterprise Plus license is required error on dashboards and reports

Cause Veeam MP license is synchronized to the Data Warehouse then reports load this information. If license is invalid in the Data Warehouse due to Synchronization server having issue this error will occur. Solution 1. Open SCOM Operations Manager Console. 2. Select Discovered Inventory 3. Filter...

6.7AI score
SaveExploits0Affected Software1
Fedora
Fedora
•added 2017/06/17 7:46 p.m.•56 views

[SECURITY] Fedora 26 Update: systemd-233-4.fc26

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

7.5CVSS1.3AI score0.15301EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2017/06/15 12:00 a.m.•16 views

The vulnerability of the TrustZone component in the Android operating system allows a hacker to simplify the process of decoding messages.

The vulnerability of the TrustZone component in the Android operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can enable a remote attacker to simplify the process of decoding messages...

9.3CVSS7.1AI score0.00347EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/06/15 12:00 a.m.•11 views

The vulnerability of the Kernel component in Mac OS X and iOS operating systems allows attackers to execute arbitrary code in a privileged context.

The vulnerability of the Kernel component in Mac OS X and iOS operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context racing environment through a specially created...

7.6CVSS7.9AI score0.04189EPSS
SaveExploits4References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2017/06/15 12:00 a.m.•16 views

The vulnerability of the embedded file system (EFS) of the Android operating system allows a hacker to simplify the process of decoding messages.

The vulnerability of the embedded file system EFS of the Android operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can enable a malicious actor to simplify the process of decoding messages remotely...

7.6CVSS7.1AI score0.00351EPSS
SaveExploits0References3
Rows per page
Query Builder