Unauthorized Access Vulnerability in Alibaba otter manager Distributed Database Synchronization System

Alibaba otter manager distributed database synchronization system is based on database incremental log parsing , quasi real-time synchronization to the local server room or off-site server room mysql/oracle database . A distributed database synchronization system . Alibaba otter manager distribut...

[SECURITY] Fedora 29 Update: systemd-239-14.git33ccd62.fc29

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

The vulnerability of the compression function in the Zstandard library allows a hacker to execute arbitrary code.

The vulnerability of the compression function in the Zstandard library for data compression is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Eclipse OpenJ9 virtual machine, related to synchronization errors when using a shared resource, allows a perpetrator to cause memory corruption.

The vulnerability of the Eclipse OpenJ9 virtual machine is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker operating remotely to cause memory corruption...

CVE-2019-15031: Improper Synchronization

In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction via the hardware transactional memory instruction tbegin and then accesses vector registers...

CVE-2019-16137: Improper Synchronization

An issue was discovered in the spin crate before 0.5.2 for Rust, when RwLock is used. Because memory ordering is mishandled, two writers can acquire the lock at the same time, violating mutual exclusion...

[SECURITY] Fedora 30 Update: systemd-241-12.git1e19bcd.fc30

systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...

Internally mutating methods take immutable ref self

Affected versions of this crate exposed several methods which took self by immutable reference, despite the requesting the RenderDoc API to set a mutable value internally. This is technically unsound and calling these methods from multiple threads without synchronization could lead to unexpected...

RUSTSEC-2019-0018 Internally mutating methods take immutable ref self

Affected versions of this crate exposed several methods which took self by immutable reference, despite the requesting the RenderDoc API to set a mutable value internally. This is technically unsound and calling these methods from multiple threads without synchronization could lead to unexpected...

CVE-2016-10798: Concurrent Execution using Shared Resource with Improper Synchronization

cPanel before 58.0.4 allows a file-ownership change to nobody via rearrangeacct SEC-134...

The vulnerability of the Linux operating system’s kernel allows a hacker to trigger a service failure and obtain confidential information.

The vulnerability in the driver /infiniband/core/uverbsmain.c of Linux operating systems arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to obtain confidential information or cause service failures...

The vulnerability of Intel Graphics Driver drivers arises from synchronization errors when using a shared resource, allowing a hacker to trigger a service failure.

The vulnerability of Intel Graphics Drivers stems from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2018-20940: Concurrent Execution using Shared Resource with Improper Synchronization

cPanel before 68.0.27 allows attackers to read root's crontab file during a short time interval upon the enabling of backups SEC-342...

CVE-2019-7614: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition flaw was found in the response headers Elasticsearch versions before 7.2.1 and 6.8.2 returns to a request. On a system with multiple users submitting requests, it could be possible for an attacker to gain access to response header containing sensitive data from another user...

CVE-2019-2345: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition while accessing DMA buffer in jpeg driver in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710...

The vulnerability in the implementation of the Siemens R3964 driver’s code in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the Siemens R3964 driver implementation, located in the Linux kernel’s drivers/tty/nr3964.c file, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the daemon/archive.go component of the automation tool for deploying and managing applications in Docker-enabled environments allows a malicious individual to escalate their privileges and gain access to read and write file operations.

The vulnerability in the daemon/archive.go component of the automation tool for deploying and managing applications in Docker-enabled environments is related to synchronization errors when using a shared resource. This “race condition” allows an attacker to increase their privileges and gain acce...

Nextcloud: User can delete data in shared folders he's not autorized to access

Steps to reproduce 1. create a group folder named TEST and share with "admin group" and "test group", marking the advanced permission flag 2. create two folders inside the main share: visible and invisible 3. inside "invisible" folder create a test file let's say something like "test.txt" 4. set...

Command Execution Vulnerability in zzzzphp

zzphp using PHP+mysql/access/sqlite free station building system, support for cell phone automatic synchronization. zzzphp there is a command execution vulnerability , attackers into the background management system , you can use the vulnerability to indirectly execute system commands...

CVE-2019-13178: Concurrent Execution using Shared Resource with Improper Synchronization

modules/luksbootkeyfile/main.py in Calamares versions 3.1 through 3.2.10 has a race condition between the time when the LUKS encryption keyfile is created and when secure permissions are set...