Lucene search
+L

5812 matches found

BDU FSTEC
BDU FSTEC
•added 2021/06/25 12:00 a.m.•13 views

The vulnerability of the drm_syncobj_handle_to_fd function (drm_syncobj.c) in the Android operating system’s kernel allows a intruder to gain unauthorized access to protected information.

The vulnerability of the drmsyncobjhandletofd function in the Android operating system’s kernel is related to the disclosure of information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.1CVSS6.6AI score0.00153EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/06/25 12:00 a.m.•12 views

The vulnerabilities of IBM DB2 database management systems, including IBM DB2 Connect, are caused by synchronization errors when using shared resources, allowing attackers to alter the configuration of DB2.

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect stems from synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to alter the configuration of DB2...

6.2CVSS6.5AI score0.0029EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/06/25 12:00 a.m.•13 views

The vulnerability in the implementation of the CAN BCM protocol in Linux kernel allows a hacker to increase their privileges.

The vulnerability of the CAN BCM protocol implementation in Linux operating systems arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS6.8AI score0.00431EPSS
SaveExploits1References22Affected Software7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/25 12:00 a.m.•5 views

CVE-2021-31615: Concurrent Execution using Shared Resource with Improper Synchronization

Unencrypted Bluetooth Low Energy baseband links in Bluetooth Core Specifications 4.0 through 5.2 may permit an adjacent device to inject a crafted packet during the receive window of the listening device before the transmitting device initiates its packet transmission to achieve full MITM status...

5.3CVSS5.8AI score0.00405EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/06/24 12:00 a.m.•27 views

Hebei OuRun TianTeng YunMengBar Network Studio YMBCMS Command Execution Vulnerability

YMBCMS is one of the self-developed products under Hebei OuRun TianTeng YunMengBar Network Studio.YMBCMS integrates computer station, cell phone station, WeChat public platform, small program, APP in one, sharing space, data synchronization and so on. Hebei OuRunTianTeng YunMengBar Network Studio...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/06/21 12:00 a.m.•14 views

PT-2024-11322 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible use-after-free in the wdt turnoff function of the sc520 wdt module. The problem occurs because the del timer function does not wait for the timer...

9.8CVSS6.7AI score0.17563EPSS
SaveExploits9References1226
Positive Technologies
Positive Technologies
•added 2021/06/21 12:00 a.m.•14 views

PT-2024-11323 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible use-after-free in the wdt startup function. The problem occurs because the del timer function does not wait until the timer handler finishes, which c...

9.8CVSS6.7AI score0.17563EPSS
SaveExploits9References1226
Fedora
Fedora
•added 2021/06/17 1:12 a.m.•48 views

[SECURITY] Fedora 33 Update: isync-1.4.2-1.fc33

mbsync is a command line application which synchronizes mailboxes. Currently Maildir and IMAP4 mailboxes are supported. New messages, message deletions and flag changes can be propagated both ways. mbsync is suitable for use in IMAP-disconnected mode...

7.8CVSS1.2AI score0.01037EPSS
SaveExploits0
OSV
OSV
•added 2021/06/16 5:15 p.m.•10 views

CVE-2021-20488

IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789...

6.5CVSS5.5AI score0.00913EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/06/16 12:00 a.m.•19 views

Unspecified Vulnerability in IBM Security Identity Manager

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

7.5CVSS6.5AI score0.00915EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•8 views

The vulnerability of the IBM DB2 database management system, caused by synchronization errors when using a shared resource, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM DB2 database management system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.2CVSS6.5AI score0.00246EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•14 views

The vulnerability of the IBM DB2 database management system, caused by synchronization errors when using a shared resource, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM DB2 database management system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.2CVSS6.5AI score0.0025EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2021/06/15 12:00 a.m.•18 views

IBM Security Identity Manager 安全漏洞

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

7.5CVSS6.4AI score0.01498EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/06/15 12:00 a.m.•0 views

PT-2021-4700

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager version 6.0.2 Description The issue is related to insufficient access controls in the Password Synchronization Plug-in of IBM Security Identity Manager, which could allow a remote attacker to gain unauthorized...

7.5CVSS0.00913EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/06/09 12:00 a.m.•15 views

PT-2024-11282 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible use-after-free issue has been identified in the Linux kernel, specifically in the mhi pci remove function of the bus: mhi: pci generic driver. The driver's remove path calls...

7.8CVSS5.8AI score0.00219EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/09 12:00 a.m.•4 views

CVE-2020-11262: Concurrent Execution using Shared Resource with Improper Synchronization

A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice...

7CVSS6AI score0.00104EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•20 views

The vulnerability of the data synchronization module at any time, triggered by user requests or by a special scheduler utility “LOCMAN Master Synchronization” of the engineering data and product lifecycle management system LOCMAN. This vulnerability is related to the unlimited loading of dangerous type files, allowing attackers to execute arbitrary code.

The vulnerability of the data synchronization module at any time, triggered by user requests or by special planning tools like “LOZMAN Master Synchronization” of the Engineering Data and Product Lifecycle management system LOZMAN, is related to the unlimited loading of dangerous files. Exploiting...

6.8CVSS6AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2021/06/03 12:00 a.m.•46 views

Nextcloud Resource Management Error Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A vulnerability exists in Nextcloud Resource Management Error Vulnerability. No detailed vulnerability details are provided at this time...

4.3CVSS6.6AI score0.01823EPSS
SaveExploits0References1
OSV
OSV
•added 2021/05/28 3:15 p.m.•5 views

DEBIAN-CVE-2021-3514

When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...

6.5CVSS6.7AI score0.012EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/05/28 3:15 p.m.•16 views

CVE-2021-3514

When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...

6.5CVSS6.7AI score0.012EPSS
SaveExploits0References3
Rows per page
Query Builder