Lucene search
+L

4254 matches found

ATTACKERKB
ATTACKERKB
added 2024/02/27 7:4 p.m.3 views

CVE-2021-46941

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide, to switch mode for DRD controller, the driver needs to do the following. To switch from device to host: 1. Reset controller with...

5.5CVSS6.3AI score0.00225EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2024/02/27 7:4 p.m.40 views

CVE-2021-46941

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide, to switch mode for DRD controller, the driver needs to do the following. To switch from device to host: 1. Reset controller with...

5.5CVSS6.4AI score0.00225EPSS
SaveExploits0References6
OSV
OSV
added 2024/02/27 7:4 p.m.4 views

UBUNTU-CVE-2021-46941

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide, to switch mode for DRD controller, the driver needs to do the following. To switch from device to host: 1. Reset controller with...

5.5CVSS6.2AI score0.00225EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2024/02/27 6:40 p.m.17 views

CVE-2021-46941 usb: dwc3: core: Do core softreset when switch mode

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Do core softreset when switch mode According to the programming guide, to switch mode for DRD controller, the driver needs to do the following. To switch from device to host: 1. Reset controller with...

6.7AI score0.00225EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/27 12:0 a.m.13 views

PT-2024-2978 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the ch ktls component of the Linux kernel and is caused by the lack of synchronization locking. This can lead to a kernel panic when taking page refcount is not...

7.8CVSS6.5AI score0.01549EPSS
SaveExploits5References804
Redos
Redos
added 2024/02/26 12:0 a.m.31 views

ROS-20240226-01

A vulnerability in the mustmkdirandopenwithperms function of the snap-confine utility is related to synchronization errors when using a shared resource "Race Situation". Exploitation of the vulnerability could allow an attacker to escalate privileges or execute arbitrary code...

7.8CVSS7.8AI score0.00384EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2024/02/26 12:0 a.m.10 views

The vulnerability of the Manageability Engine (ME) in Intel Server Platform Services (SPS) software for Lenovo ThinkSystem servers allows a malicious actor to alter the firmware configuration and trigger a service failure.

The vulnerability of the Manageability Engine ME in Intel Server Platform Services SPS of Lenovo ThinkSystem servers stems from the synchronization failure between BIOS/UEFI and ME states due to the use of non-replicable configurations. Exploiting this vulnerability can allow an attacker to alter...

2CVSS5.4AI score0.00162EPSS
SaveExploits0References2
Veracode
Veracode
added 2024/02/23 10:0 a.m.18 views

Race Condition

github.com/apache/incubator-answer is vulnerable to a Race Condition. The vulnerability is due to improper synchronization during user registration, specifically when users rapidly submit multiple registrations using scripts. This can lead to the registration of multiple user accounts with the sa...

5.9CVSS7AI score0.00895EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/02/22 12:30 p.m.30 views

Apache Answer Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

5.9CVSS7AI score0.00895EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/02/22 12:30 p.m.72 views

GHSA-9Q24-HWMC-797X Apache Answer Race Condition vulnerability

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer. This issue affects Apache Answer through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

5.9CVSS5.6AI score0.00895EPSS
SaveExploits0References4
NVD
NVD
added 2024/02/22 10:15 a.m.46 views

CVE-2024-26578

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

5.9CVSS6.6AI score0.00895EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/22 10:15 a.m.33 views

Race condition

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

6.9AI score0.00895EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/22 9:28 a.m.15 views

CVE-2024-26578 Apache Answer: Repeated submission at registration created duplicate users with the same name

Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1. Repeated submission during registration resulted in the registration of the same user. When users register, if they rapidly...

5.7AI score0.00895EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/02/22 12:0 a.m.12 views

Fedora: Security Advisory for syncthing (FEDORA-2024-b93312a597)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.6AI score0.01194EPSS
SaveExploits0References2
Prion
Prion
added 2024/02/21 3:15 p.m.37 views

Spoofing

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching already freed data...

7.6AI score0.0055EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/21 3:15 p.m.21 views

UBUNTU-CVE-2024-26583

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching already freed data...

9.8CVSS6.1AI score0.0055EPSS
SaveExploits0References26
Cvelist
Cvelist
added 2024/02/21 2:59 p.m.43 views

CVE-2024-26583 tls: fix race between async notify and socket close

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread one which called recvmsg/sendmsg may exit as soon as the async crypto handler calls complete so any code past that point risks touching already freed data...

9.8CVSS6.1AI score0.0055EPSS
SaveExploits0References5
CVE
CVE
added 2024/02/21 2:59 p.m.769 views

CVE-2024-26583

CVE-2024-26583 — Linux kernel TLS race : The vulnerability arises in the TLS path where the async crypto notify may complete while the sending thread is exiting after calling complete(), risking access to data that may already be freed. The fix involves avoiding the race by removing problematic l...

9.8CVSS6.7AI score0.0055EPSS
SaveExploits0References6Affected Software1
Fedora
Fedora
added 2024/02/21 1:39 a.m.28 views

[SECURITY] Fedora 38 Update: syncthing-1.27.3-1.fc38

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

6.5CVSS6.6AI score0.01194EPSS
SaveExploits0
Fedora
Fedora
added 2024/02/21 1:33 a.m.31 views

[SECURITY] Fedora 39 Update: syncthing-1.27.3-1.fc39

Syncthing replaces other file synchronization services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet. Using syncthing, that control is...

6.5CVSS6.6AI score0.01194EPSS
SaveExploits0
Rows per page
Query Builder