Lucene search
+L

4243 matches found

OSV
OSV
added 2022/05/24 4:51 p.m.1 views

GHSA-JQM6-M3J3-8GG9 Concurrent Execution using Shared Resource with Improper Synchronization in Elasticsearch

A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user...

5.9CVSS6.5AI score0.01008EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/20 12:0 a.m.9 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.79827EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/20 12:0 a.m.15 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.7035EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/18 5:15 p.m.7 views

UBUNTU-CVE-2022-1734

A flaw in Linux Kernel found in nfcmrvlnciunregisterdev in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine...

7CVSS6.6AI score0.00526EPSS
SaveExploits1References13
OSV
OSV
added 2022/05/17 5:47 a.m.60 views

GHSA-HW4G-FHCP-X5MQ Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or ...

8.7CVSS7.4AI score0.02294EPSS
SaveExploits0References15
Github Security Blog
Github Security Blog
added 2022/05/17 5:47 a.m.54 views

Concurrent Execution using Shared Resource with Improper Synchronization in pyftpdlib

Race condition in the FTPHandler class in ftpserver.py in pyftpdlib before 0.5.2 allows remote attackers to cause a denial of service daemon outage by establishing and then immediately closing a TCP connection, leading to the accept function having an unexpected value of None for the address, or ...

4.3CVSS4AI score0.02294EPSS
SaveExploits0References14Affected Software1
OSV
OSV
added 2022/05/17 4:59 a.m.70 views

GHSA-4644-HG35-55M9 Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS6.4AI score0.01246EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/05/17 4:59 a.m.34 views

Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication object in the shared security context, which allows attackers to gain privileges via a crafted thread...

5.1CVSS6.8AI score0.01246EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.15 views

The vulnerability of Windows Push Notification apps, which allow attackers to escalate their privileges.

The vulnerability of Windows Push Notification apps related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow attackers to gain increased privileges...

7CVSS7.2AI score0.00686EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.9 views

The vulnerability of the AWS VPN Client service, related to synchronization errors when using a shared resource, allows a perpetrator to escalate their privileges or cause a service failure.

The vulnerability of the AWS VPN Client is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

7.3CVSS6.5AI score0.0145EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.11 views

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Windows operating system kernels arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.05236EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.11 views

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS7.2AI score0.00693EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.11 views

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS7.2AI score0.006EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.12 views

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS7.2AI score0.006EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.9 views

The vulnerability of the Cluster Shared Volumes file system in Windows operating systems allows attackers to increase their privileges and gain unauthorized access to protected information.

The vulnerability of the Cluster Shared Volumes CSV file system for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges and gain unauthorized access to protected information...

7CVSS7.2AI score0.0057EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/05/13 12:0 a.m.11 views

The vulnerability of the kernel of microprogramming software in Qualcomm’s embedded chips allows a hacker to execute arbitrary code.

The vulnerability of microprogramming software in embedded Qualcomm chips relates to synchronization errors when using common resources. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

9.3CVSS7.5AI score0.00119EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/05/12 12:0 a.m.11 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.1AI score0.04861EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/05/12 12:0 a.m.11 views

The vulnerability of the Windows Digital Media Receiver component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Digital Media Receiver component of the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.3AI score0.00411EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/05/12 12:0 a.m.12 views

The vulnerability of the PlayTo Manager component for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the PlayTo Manager component for Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.2AI score0.00548EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/05/12 12:0 a.m.12 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.2AI score0.00545EPSS
SaveExploits0References1
Rows per page
Query Builder