#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report buffer feature has a race between retention cleanup and n...

CVE-2026-61854

VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-29 发布MEDIUM

A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and access management services. The issue occurs because the sy...

CVE-2026-118030

A flaw was found in the HOTP authentication mechanism of the keycloak-services component, which provides identity and ac

来源摘录 · NVD

漏洞预警2026-10-28 发布INFO

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path.

CVE-2026-115402

OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) vi

来源摘录 · NVD

安全公告2026-10-28 发布INFO

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function...

CVE-2026-118128

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdat

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-27 发布MEDIUM

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/result_manager.ts of the compone...

CVE-2026-118128

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdat

来源摘录 · NVD

漏洞预警2026-10-27 发布INFO

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race conditio...

CVE-2026-117507

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManag

历史摘要 · 未重新核验 · NVD

安全公告2026-10-27 发布INFO

a2aproject a2a-java TaskManager.saveTaskEvent race condition

CVE-2026-117507

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManag

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-27 发布INFO

@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout cou...

CVE-2026-117499

@fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布MEDIUM

A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 1...

CVE-2026-113896

A race condition was addressed with additional validation. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to cause unexpe...

CVE-2026-112708

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker may tamper with c...

CVE-2026-112556

A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia

来源摘录 · NVD

漏洞预警2026-10-26 发布INFO

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskProjection.ApplyStatus of the component TaskProjection. Ex...

CVE-2026-116476

A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview3. The affected element is the function TaskP

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-26 发布LOW

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multiple times via the...

CVE-2026-116215

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated m

来源摘录 · NVD

漏洞预警2026-10-26 发布MEDIUM

A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the file src/inc/core.php of the component File Upload. This m...

CVE-2026-116263

A flaw has been found in HaschekSolutions PictShare up to 3.7.1. The impacted element is the function architect of the f

来源摘录 · NVD

漏洞预警2026-10-26 发布LOW

A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the file users.service.ts of the component Registration. Such manipulatio...

CVE-2026-116121

A vulnerability was identified in NocoDB up to 2026.08.0. This issue affects some unknown processing of the file users.s

来源摘录 · NVD

安全公告2026-10-23 发布INFO

Tokio: Race condition in `tokio::time::Interval`

CVE-2026-115567

### Summary On the multi-threaded runtime, there is a race condition between `Interval::poll_tick` and the runtime's ti

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-23 发布INFO

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll_tick (including .tick().await) and the multi-threaded runt...

CVE-2026-115567

Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll_t

来源摘录 · NVD

漏洞预警2026-10-22 发布LOW

Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authentication, where the per-connection sticky round trip...

CVE-2026-114641

Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend a

来源摘录 · NVD

安全公告2026-10-22 发布INFO

Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Tripper

CVE-2026-114641

Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend a

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-21 发布INFO

The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it was called from several places without holding the schedu...

CVE-2026-78118

The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it

历史摘要 · 未重新核验 · NVD