Browse CVEs

MEDIUM 6.4 CVE-2015-8511 Race condition in the lockscreen feature in Mozilla Firefox OS before 2.5 allows physically proximate attackers to bypass an intended passcode requir… Firefox Os after 2.2 Fix from $1,6002016-01-09 MEDIUM 5.8 CVE-2015-7990 Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NUL… Linux Kernel after 4.3.2 Fix from $1,6002015-12-28 HIGH 7.1 CVE-2015-8461 Race condition in resolver.c in named in ISC BIND 9.9.8 before 9.9.8-P2 and 9.10.3 before 9.10.3-P2 allows remote attackers to cause a denial of serv… Bind Mitigation only Fix from $1,9502015-12-16 HIGH 9.3 CVE-2015-6789 Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a deni… Chrome after 47.0.2526.73 Fix from $1,9502015-12-14 HIGH 7.2 CVE-2015-6126 Race condition in the Pragmatic General Multicast (PGM) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, W… Windows 10 Patch available Fix from $1,9502015-12-09 HIGH 7.1 CVE-2015-7820 Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8… Switch Center after 8.1.1.0 Fix from $1,9502015-11-12 HIGH 7.1 CVE-2015-7817 Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8… System Networking Switch Center after 8.1.1.0 Fix from $1,9502015-11-12 MEDIUM 6.8 CVE-2015-7189 Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitra… Firefox after 41.0.2 Fix from $1,6002015-11-05 MEDIUM 6.9 CVE-2015-7613 Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges by triggering an ipc_addid ca… Linux Kernel 3.2.72 / 3.4.111+ Fix from $1,6002015-10-19 MEDIUM 6.8 CVE-2015-6761 The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies o… Chrome after 45.0.2454.101 Fix from $1,6002015-10-15 MEDIUM 6.8 CVE-2015-4510 Race condition in the WorkerPrivate::NotifyFeatures function in Mozilla Firefox before 41.0 allows remote attackers to execute arbitrary code or caus… Firefox after 40.0.3 Fix from $1,6002015-09-24 MEDIUM 6.9 CVE-2015-3247 Race condition in the worker_update_monitors_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of service (h… Enterprise Linux Mitigation only Fix from $1,6002015-09-08 HIGH 9.3 CVE-2015-5754EPSS 7% Race condition in runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 allows attackers to execute arbi… Mac Os X after 10.10.4 Fix from $1,9502015-08-17 MEDIUM 6.9 CVE-2015-2418 Race condition in Microsoft Malicious Software Removal Tool (MSRT) before 5.26 allows local users to gain privileges via a crafted DLL, aka "MSRT Rac… Malicious Software Removal Tool after 5.25 Fix from $1,6002015-07-20 MEDIUM 6.9 CVE-2015-3709 Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by lever… Mac Os X after 10.10.3 Fix from $1,6002015-07-03 HIGH 7.1 CVE-2015-4199 Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attac… iOS Mitigation only Fix from $1,9502015-06-27 MEDIUM 5.4 CVE-2015-4203 Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configu… iOS Mitigation only Fix from $1,6002015-06-23 MEDIUM 6.2 CVE-2015-3339 Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a set… Linux Kernel after 3.19.5 Fix from $1,6002015-05-27 MEDIUM 6.9 CVE-2014-9710 The Btrfs implementation in the Linux kernel before 3.19 does not ensure that the visible xattr state is consistent with a requested replacement, whi… Linux Kernel 3.10.83 / 3.12.45+ Fix from $1,6002015-05-27 MEDIUM 6.8 CVE-2015-2715 Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary cod… Firefox after 37.0.2 Fix from $1,6002015-05-14 MEDIUM 6.9 CVE-2015-2234 Race condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses world-writable permissions for the update files di… System Update after 5.06.0027 Fix from $1,6002015-05-12 HIGH 8.5 CVE-2015-1882 Multiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gain privil… Websphere Application Server Patch available Fix from $1,9502015-04-27 MEDIUM 6.8 CVE-2015-2706 Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent function in Mozilla Firefox before 37.0.2 allows remote attackers to execute arbitrary… Firefox after 37.0.1 Fix from $1,6002015-04-27 MEDIUM 6.8 CVE-2015-1234 Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of … Chrome after 41.0.2272.102 Fix from $1,6002015-04-01 HIGH 7.1 CVE-2015-0654 Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 a… Intrusion Prevention System Mitigation only Fix from $1,9502015-03-13 MEDIUM 5.7 CVE-2015-0632 Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service vi… iOS Mitigation only Fix from $1,6002015-02-27 HIGH 7.1 CVE-2015-0631 Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by m… Ips Sensor Software Mitigation only Fix from $1,9502015-02-21 HIGH 7.1 CVE-2015-0609 Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 1… iOS after 15.4 Fix from $1,9502015-02-16 MEDIUM 6.9 CVE-2014-4813 Race condition in the client in IBM Tivoli Storage Manager (TSM) 5.4.0.0 through 5.4.3.6, 5.5.0.0 through 5.5.4.3, 6.1.0.0 through 6.1.5.6, 6.2 befor… Tivoli Storage Manager Patch available Fix from $1,6002015-02-13 HIGH 7.1 CVE-2015-0608 Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attacke… iOS after 15.4 Fix from $1,9502015-02-12