#cwe-362

共收录 515 条相关情报。

← 返回所有主题
漏洞预警2026-10-05 发布INFO

In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no add...

CVE-2026-58880

In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. Thi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message formats a date or time argu...

CVE-2026-104714

Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Stru

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-05 发布INFO

Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-229 uses InstanceAdm...

CVE-2026-104970

Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/li

历史摘要 · 未重新核验 · NVD

安全公告2026-10-05 发布INFO

Plane: InstanceAdminSignUpEndpoint TOCTOU race allows two concurrent unauthenticated callers to both bootstrap as Plane instance admins

CVE-2026-104970

Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/li

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-05 发布INFO

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This...

CVE-2026-105163

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-04 发布INFO

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of the component Imag...

CVE-2026-105163

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function

历史摘要 · 未重新核验 · NVD

安全公告2026-10-04 发布INFO

crossplane crossplane-runtime ImageConfig client.go Get toctou

CVE-2026-105163

A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-03 发布INFO

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup...

CVE-2026-105112

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-03 发布INFO

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to deadlock the alerting subsystem. Attac...

CVE-2026-105112

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated

历史摘要 · 未重新核验 · NVD

安全公告2026-10-03 发布INFO

Nezha 1.8.0 before 2.3.13 Deadlock DoS via notification-group endpoints

CVE-2026-105112

Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-02 发布INFO

Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state

CVE-2026-104855

### Impact Wasmtime's implementation of bulk-data-transfer WebAssembly instructions, such as `memory.copy`, contains a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-02 发布INFO

Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk operations including memory.copy, table.grow, and array....

CVE-2026-104855

Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk

历史摘要 · 未重新核验 · NVD

安全公告2026-10-02 发布INFO

Wasmtime: Preemption and traps during bulk operations enable breaking internal VM state

CVE-2026-104855

Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-02 发布INFO

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions...

CVE-2026-39601

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop B

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized...

CVE-2026-104057

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-01 发布INFO

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections) in its WebSocket...

CVE-2026-104057

Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite toke...

CVE-2026-103282

Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows

历史摘要 · 未重新核验 · NVD

安全公告2026-10-01 发布INFO

Ghost 0.5.0 before 6.23.0 Multiple Account Creation via Invite Token

CVE-2026-103282

Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-01 发布INFO

MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper) token and rewinding of the token counter. The HOT...

CVE-2026-103651

MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chr...

CVE-2026-95384

Race condition in Transactions Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially

历史摘要 · 未重新核验 · NVD