Linux kernel Heap Buffer Overflow DoS

The vulnerability of the da9150chargerremove function in the drivers/power/supply/da9150-charger.c file of the Linux kernel is related to the use of memory after it is freed due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a...

Sielco PolyEco Digital FM Transmitter 2.0.6 - Account Takeover / Lockout / EoP Vulnerability

Exploit Title: Sielco PolyEco Digital FM Transmitter 2.0.6 - Account Takeover / Lockout / EoP Exploit Author: LiquidWorm Vendor: Sielco S.r.l Product web page: https://www.sielco.org Affected version: PolyEco1000 CPU:2.0.6 FPGA:10.19 PolyEco1000 CPU:1.9.4 FPGA:10.19 PolyEco1000 CPU:1.9.3 FPGA:10....

Windows DNS Server Code Execution

The vulnerability of Windows operating system DNS servers is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows DNS Server Code Execution

The vulnerability of Windows operating system DNS servers is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

L2TP Code Execution

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

L2TP Code Execution

The vulnerability of the Layer 2 Tunneling Protocol L2TP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2023-2304 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server versions affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows DNS Server, allowing a remote attacker to execute arbitrary code. This can...

PT-2023-2399 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Internet Key Exchange IKE Protocol Extensions affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Internet Key Exchange IKE protocol ...

Siemens SCALANCE W1750D Concurrent Execution Using Shared Resource with Improper Synchronization (CVE-2021-25158)

A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point IAP products in versions: Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant...

PT-2023-2271 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Layer 2 Tunneling Protocol L2TP in Windows operating systems. This can allow a...

PT-2023-2303 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in Windows DNS Server, allowing remote attackers to execute arbitrary code and affect the system...

CVE-2023-28232: Concurrent Execution using Shared Resource with Improper Synchronization

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability...

PT-2023-2288 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the implementation of the Layer 2 Tunneling Protocol L2TP in Windows operating systems. This can allow a...

PT-2023-2466 · Microsoft · Windows Clip Service +1

Name of the Vulnerable Software and Affected Versions: Windows Clip Service affected versions not specified Description: The issue is caused by synchronization errors when using a shared resource in the Windows Clip Service of Windows operating systems. This can allow an attacker to elevate their...

Pegasystem Synchronization Engine 信任管理问题漏洞

Pegasystem Synchronization Engine is a synchronization engine application from Pegasystem Corporation. A security vulnerability exists in Pegasystem Synchronization Engine versions 3.1.1 through 3.1.27, which can be exploited by a user with non-administrative access to change the configuration fi...

PT-2025-53197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists within the hidp session thread function, potentially leading to a use-after-free issue. Specifically, the timer may remain active while hidp del timer is invoked...

Zoom Client for IT Admins Privilege Escalation

The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for IT Admins is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to elevate their privileges to the SYSTEM level...

Gatekeeper Privilege Escalation

The vulnerability of the Gatekeeper component in the macOS Ventura operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerabilities fixed in IBM QRadar SIEM

IBM fixed vulnerabilities in subcomponents of QRadar SIEM: Data Synchronization App, Use Case Manager app, QRadar Assistant app, Data Synchronization app and Wincollect agent. A malicious party can exploit the vulnerabilities to cause a denial-of-service, to gain access to sensitive data, or to...

PT-2023-36705

Уязвимость функции rcu irq enter check tick модуля kernel/rcu/tree.c подсистемы синхронизации в многопоточных системах ядра операционной системы Linux связана с выполнением цикла с недоступным условием выхода«Бесконечный цикл». Эксплуатация уязвимости может позволить нарушителю оказать воздействи...