5877 matches found
Windows ALPC Privilege Escalation
The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...
ALSA-2022:8291 Moderate: rsync security and bug fix update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...
Nextcloud has an unspecified vulnerability (CNVD-2022-77502)
A security vulnerability exists in Nextcloud Desktop Client, an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany, which stems from the fact that its desktop client could be tricked into opening/executing local files when clicking o...
PT-2022-37992
Уязвимость функции kcm splice read модуля net/kcm/kcmsock.c реализации сетевых функций ядра операционной системы Linux связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
Moderate: rsync security and bug fix update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...
Windows Storage Services Privilege Escalation
The vulnerability of the Windows operating system’s Storage Services is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access and increase their privileges...
Windows Photo Import API Privilege Escalation
The vulnerability of the Windows Photo Import API of the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and increase their privileges...
Design/Logic Flaw
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...
CVE-2022-41882
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...
Microsoft Windows PPTP Code Execution
The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially craft...
CVE-2022-41882
The CVE-2022-41882 entry concerns the Nextcloud Desktop Client. Affected product: Nextcloud Desktop Client prior to version 3.6.1. Root cause: clicking a nc://open/ link for a malicious shared file, when the file is locally synced or the virtual filesystem is enabled, can cause the default editor...
CVE-2022-41882
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. In version 3.6.0, if a user received a malicious file share and has it synced locally or the virtual filesystem enabled and clicked a nc://open/ link it will open the default editor for the file...
Denial Of Service (DoS)
389-ds-base is vulnerable to Denial Of Service DoS. The vulnerability exists when the content synchronization plugin is enabled, allowing an attacker crash the application through the null pointer dereference by providing a maliciously crafted query...
Apache Tomcat Synchronization Unauthorized Access
The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Microsoft Windows PPTP Code Execution
The vulnerability of the Point to Point Tunneling Protocol PPTP network protocol implementation in the Microsoft Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2022-41090: Concurrent Execution using Shared Resource with Improper Synchronization
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...
CVE-2022-41116: Concurrent Execution using Shared Resource with Improper Synchronization
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability...
CVE-2022-44551: Concurrent Execution using Shared Resource with Improper Synchronization
The iaware module has a vulnerability in thread security. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability...