Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2020-03-14 CVE-2020-10575 Race Condition vulnerability in Meetecho Janus
An issue was discovered in Janus through 0.9.1.
network
high complexity
meetecho CWE-362
4.2
2020-03-11 CVE-2020-1733 Race Condition vulnerability in multiple products
A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user.
local
high complexity
redhat fedoraproject debian CWE-362
5.0
2020-03-09 CVE-2020-10237 Race Condition vulnerability in Froxlor
An issue was discovered in Froxlor through 0.10.15.
local
low complexity
froxlor CWE-362
5.5
2020-02-27 CVE-2020-3831 Race Condition vulnerability in Apple Iphone OS
A race condition was addressed with improved locking.
local
high complexity
apple CWE-362
7.0
2020-02-21 CVE-2020-9329 Race Condition vulnerability in Gogs
Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition.
network
high complexity
gogs CWE-362
5.9
2020-02-19 CVE-2020-3163 Race Condition vulnerability in Cisco Unified Contact Center Enterprise
A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
high complexity
cisco CWE-362
5.9
2020-02-18 CVE-2020-1814 Race Condition vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Dangling pointer dereference vulnerability.
network
high complexity
huawei CWE-362
5.3
2020-02-12 CVE-2013-3685 Race Condition vulnerability in Spritesoftware Spritebackup and Spritebud
A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.
local
high complexity
spritesoftware CWE-362
7.0
2020-02-11 CVE-2014-9748 Race Condition vulnerability in multiple products
The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cause a denial of service (deadlock) or possibly have unspecified other impact by leveraging a race condition.
network
high complexity
libuv nodejs CWE-362
8.1
2020-02-11 CVE-2020-6388 Race Condition vulnerability in Google Chrome
Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-362
8.8