#cwe-667

共收录 47 条相关情报。

← 返回所有主题

漏洞预警2026-10-30 发布HIGH

VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report buffer feature has a race between retention cleanup and n...

CVE-2026-61854

VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report

来源摘录 · NVD / OSV.dev

#advisory #cve #cwe-362 #cwe-400 #cwe-667

漏洞预警2026-10-30 发布MEDIUM

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a local_bh imbalance in seg6_input_c...

CVE-2026-118593

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9

来源摘录 · NVD

#cve #cwe-667

漏洞预警2026-10-27 发布INFO

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial...

CVE-2026-106174

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated att

历史摘要 · 未重新核验 · NVD

#cve #cwe-667

安全公告2026-10-23 发布INFO

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

CVE-2026-112907

On Windows the soft locks (`SoftFileLock`, `MarkerSoftFileLock`, `SoftFileLease`, their async forms, and a `FileLock` th

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-667 #severity:low

漏洞预警2026-10-21 发布INFO

VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the block that releases the lock. A request carrying a non...

CVE-2026-110803

VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside t

来源摘录 · NVD

#cve #cwe-400 #cwe-667

安全公告2026-10-21 发布INFO

Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8

CVE-2026-110803

VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-400 #cwe-667

漏洞预警2026-10-20 发布MEDIUM

DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock. open_data creates the table's lock fil...

CVE-2026-111879

DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release

来源摘录 · NVD

#cve #cwe-667

安全公告2026-10-03 发布INFO

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non...

CVE-2026-105113

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock le

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-667 #severity:high

漏洞预警2026-10-03 发布INFO

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock leaks on a nil-map panic path. Any authenticated non-admin ...

CVE-2026-105113

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock le

历史摘要 · 未重新核验 · NVD

#cve #cwe-667

安全公告2026-10-03 发布INFO

Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock

CVE-2026-105113

Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock le

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-667

漏洞预警2026-09-15 发布INFO

In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges neede...

CVE-2026-56914

In multiple locations, there is a possible use-after-free due to improper locking. This could lead to local escalation o

历史摘要 · 未重新核验 · NVD

#cve #cwe-416 #cwe-667

安全公告2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...

CVE-2026-80126

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-667 #severity:medium

漏洞预警2026-09-07 发布INFO

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking vulnerability. A low privileged attac...

CVE-2026-80126

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains

历史摘要 · 未重新核验 · NVD

#cve #cwe-667

漏洞预警2026-08-24 发布INFO

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 0.11.0 through 1.44.0, the OpenTracing bridge's bridgeSpan contains an unsynchronized extraBaggageItems ...

CVE-2026-45404

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 0.11.0 through 1.44.0, the OpenTracing bridge's

历史摘要 · 未重新核验 · NVD

#cve #cwe-362 #cwe-667

漏洞预警2026-07-28 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the system, sysctl and platform opera...

CVE-2026-62426

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-412 #cwe-667

漏洞预警2026-07-19 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_OP_GET_MAPPING_INFO The AMDGPU_GEM_OP_GET_MAPPING_INFO br...

CVE-2026-63880

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lock leak on ENOMEM in AMDGPU_GEM_O

来源摘录 · NVD

#cve #cwe-667

漏洞预警2026-06-24 发布INFO

concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock does not verify that the calling thread acquired the write l...

CVE-2026-54906

concurrent-ruby is a modern concurrency tools for Ruby. Prior to 1.3.7, Concurrent::ReadWriteLock#release_write_lock doe

历史摘要 · 未重新核验 · NVD

#cve #cwe-414 #cwe-667

漏洞预警2026-06-24 发布MEDIUM

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction commit when using flushoncommit When using the flushonc...

CVE-2026-53122

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock between reflink and transaction

来源摘录 · NVD

#cve #cwe-667

漏洞预警2026-06-18 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To create and manage guests, domctl operations ...

CVE-2026-42490

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-667

漏洞预警2026-06-18 发布INFO

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To create and manage guests, domctl operations ...

CVE-2026-42489

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to whi

历史摘要 · 未重新核验 · NVD

#cve #cwe-667