Vulnerabilities > Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

DATE CVE VULNERABILITY TITLE RISK
2020-02-19 CVE-2020-3163 Race Condition vulnerability in Cisco Unified Contact Center Enterprise
A vulnerability in the Live Data server of Cisco Unified Contact Center Enterprise could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
high complexity
cisco CWE-362
5.9
2020-02-18 CVE-2020-1814 Race Condition vulnerability in Huawei products
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a Dangling pointer dereference vulnerability.
network
high complexity
huawei CWE-362
5.3
2020-02-12 CVE-2013-3685 Race Condition vulnerability in Spritesoftware Spritebackup and Spritebud
A Privilege Escalation Vulnerability exists in Sprite Software Spritebud 1.3.24 and 1.3.28 and Backup 2.5.4105 and 2.5.4108 on LG Android smartphones due to a race condition in the spritebud daemon, which could let a local malicious user obtain root privileges.
local
high complexity
spritesoftware CWE-362
7.0
2020-02-11 CVE-2014-9748 Race Condition vulnerability in multiple products
The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads, which allows attackers to cause a denial of service (deadlock) or possibly have unspecified other impact by leveraging a race condition.
network
high complexity
libuv nodejs CWE-362
8.1
2020-02-11 CVE-2020-6388 Race Condition vulnerability in Google Chrome
Out of bounds access in WebAudio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-362
8.8
2020-01-31 CVE-2019-3016 Race Condition vulnerability in Linux Kernel
In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest.
local
high complexity
linux CWE-362
4.7
2020-01-28 CVE-2014-3856 Race Condition vulnerability in Fishshell Fish
The funced function in fish (aka fish-shell) 1.23.0 before 2.1.1 does not properly create temporary files, which allows local users to gain privileges via a temporary file with a predictable name.
local
high complexity
fishshell CWE-362
7.0
2020-01-28 CVE-2014-2906 Race Condition vulnerability in Fishshell Fish
The psub function in fish (aka fish-shell) 1.16.0 before 2.1.1 does not properly create temporary files, which allows local users to execute arbitrary commands via a temporary file with a predictable name.
local
high complexity
fishshell CWE-362
7.0
2020-01-21 CVE-2019-20384 Race Condition vulnerability in Gentoo Portage
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners.
local
low complexity
gentoo CWE-362
5.5
2020-01-16 CVE-2019-19278 Race Condition vulnerability in Siemens Sinamics Perfect Harmony Gh180 Firmware
A vulnerability has been identified in SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-....
low complexity
siemens CWE-362
6.8