TYPE DE FAIBLESSE

Verrouillage incorrect CWE-667

13 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-667 (en anglais) →

CVE-2026-54906Les applications Ruby utilisant la gem `concurrent-ruby` (avant la version 1.3.7) sont affectées par une erreur de synchronisation dans la gestion des verrous d'écriture. Un attaqu… 2.1 FAIBLE

CVE-2026-22735Les applications Java utilisant Spring MVC ou WebFlux sont susceptibles de subir une corruption de flux lors de la mise en œuvre d'événements envoyés par le serveur (SSE). Un attaq… 2.6 FAIBLE

CVE-2026-20757Le serveur Gallagher Command Centre est affecté par un problème de verrouillage dans son intégration Morpho. Un utilisateur disposant d'un accès privilégié de bas niveau au système… 2.5 FAIBLE

CVE-2025-14345A post-authentication flaw in the network two-phase commit protocol used for cross-shard transactions in MongoDB Server may lead to logical data inconsistencies under specific cond… 2.3 FAIBLE

CVE-2025-63396An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a D… 3.3 FAIBLE

CVE-2024-50044In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change rfcomm_sk_state_change attempts to use sock… 3.3 FAIBLE

CVE-2022-48937In the Linux kernel, the following vulnerability has been resolved: io_uring: add a schedule point in io_add_buffers() Looping ~65535 times doing kmalloc() calls can trigger soft… 3.3 FAIBLE

CVE-2023-44298 Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physical attacker could pot… 3.6 FAIBLE

CVE-2023-3436Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream. 3.3 FAIBLE

CVE-2020-9959A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A perso… 2.4 FAIBLE

CVE-2019-13762Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code. 3.3 FAIBLE

CVE-2019-6156In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI… 3.3 FAIBLE

CVE-2002-1869Heysoft EventSave 5.1 and 5.2 and Heysoft EventSave+ 5.1 and 5.2 does not check whether the log file can be written to, which allows attackers to prevent events from being recorded… 3.3 FAIBLE