#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-08-18 发布INFO

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `ShareHandler` reads the share token's `DownloadLimit` under `RLock`, releases the lock, serves the file, then...

CVE-2026-50139

goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, `ShareHandler` reads the share token's `DownloadLimit

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154...

CVE-2026-74973

Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly counted towards the block counter if sent simultaneously, p...

CVE-2026-1199

Zabbix API and Frontend login lockout mechanism has a flaw where several unsuccessful login requests are not properly co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS ...

CVE-2026-64782

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS ...

CVE-2026-64779

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in Safari 26.6.1, iOS 18.7.10

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-rc.16, repeated PUT /api/user/self requests that update l...

CVE-2026-64865

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to 1.0.0-

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布LOW

A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component...

CVE-2026-19975

CVE-2026-19975 是 Azuriom CMS 1.2.12 及之前版本中存在的一个时间-of-check到时间-of-use(TOCTOU)类逻辑缺陷,具体位于 Money Transfer Handler 组件的 app/Ht

历史摘要 · 未重新核验 · NVD

安全公告2026-08-17 发布INFO

Azuriom CMS Money Transfer ProfileController.php transferMoney toctou

CVE-2026-19975

A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file ap

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-15 发布HIGH

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI The MIPI DSI and CSI domains share contr...

CVE-2026-72009

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx93-blk-ctrl: Extract PHY as shared dom

来源摘录 · NVD

漏洞预警2026-08-14 发布INFO

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification fu...

CVE-2026-13198

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Ra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-14 发布INFO

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and pro...

CVE-2026-13197

Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Ra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safe_load_prompt_embeds in vllm/renderers/embed_utils.py uses torch.sparse.check_...

CVE-2026-73557

vLLM is an inference and serving engine for large language models. From 0.20.2rc0 until 0.26.0, safe_load_prompt_embeds

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The Glob...

CVE-2026-0295

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0...

CVE-2026-7366

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower G

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-12 发布INFO

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition ...

CVE-2026-7366

IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower G

历史摘要 · 未重新核验 · NVD

安全公告2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive...

CVE-2026-18150

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race c

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition.

CVE-2026-18150

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race c

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to a race condition.

CVE-2026-18250

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and bypass secu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Device Health Attestation Service allows a...

CVE-2026-66802

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestati

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-62908

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine all

历史摘要 · 未重新核验 · NVD