CWE-821: Incorrect Synchronization

The product utilizes a shared resource in a concurrent manner, but it does not correctly synchronize access to the resource.

What the weakness is: CWE-821 at MITRE. All weaknesses

1. 8.2CVE-2026-77584EPSS 0.2%2026-08-20

   Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN before the CONFLUX_LINK on the same circuit, attaching an exit stream …

2. 6.9CVE-2026-56132EPSS 0.1%2026-06-19

   In libexpat before 2.8.2, there is a heap-based buffer overflow in doProlog in xmlparse.c because scaffold backing array reallocation is mishandled when there is data-structure sharing across parsers.

3. 9.8CVE-2026-43198EPSS 0.3%2026-05-06

   In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock() Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock() is done too late. After tcp_v4_syn_recv_sock()…

4. 7.1CVE-2026-21919EPSS 0.2%2026-04-09

   An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker with low privileges to cause a complete Denial-of-Service (DoS) of the management p…

5. 4.0CVE-2024-58133EPSS 0.3%2025-04-06

   In chainmaker-go (aka ChainMaker) before 2.4.0, when making frequent updates to a node's configuration file and restarting this node, concurrent writes by logger.go to a map are mishandled. Creating other logs simultaneously can lead to a …

6. 4.0CVE-2024-58132EPSS 0.3%2025-04-06

   In chainmaker-go (aka ChainMaker) before 2.3.6, multiple updates to a single node's configuration can cause other normal nodes to perform concurrent read and write operations on a map, leading to a panic.

7. 3.7CVE-2024-58131EPSS 0.3%2025-04-06

   FISCO BCOS 3.11.0 has an issue with synchronization of the transaction pool that can, for example, be observed when a malicious node (that has modified the codebase to allow a large min_seal_time value) joins a blockchain network.

8. 6.5CVE-2024-6657EPSS 0.2%2024-10-11

   A denial of service may be caused to a single peripheral device in a BLE network when multiple central devices continuously connect and disconnect to the peripheral. A hard reset is required to recover the peripheral device.

9. 2.7CVE-2024-4278EPSS 0.2%2024-09-26

   An information disclosure issue has been discovered in GitLab EE affecting all versions starting from 16.5 prior to 17.2.8, from 17.3 prior to 17.3.4, and from 17.4 prior to 17.4.1. A maintainer could obtain a Dependency Proxy password by …

10. 5.3CVE-2024-5755EPSS 0.3%2024-06-27

    In lunary-ai/lunary versions <=v1.2.11, an attacker can bypass email validation by using a dot character ('.') in the email address. This allows the creation of multiple accounts with essentially the same email address (e.g., 'attacker123@…

11. 9.1CVE-2024-1739EPSS 0.6%2024-04-16

    lunary-ai/lunary is vulnerable to an authentication issue due to improper validation of email addresses during the signup process. Specifically, the server fails to treat email addresses as case insensitive, allowing the creation of multip…

12. 7.5CVE-2024-1902EPSS 0.4%2024-04-10

    lunary-ai/lunary is vulnerable to a session reuse attack, allowing a removed user to change the organization name without proper authorization. The vulnerability stems from the lack of validation to check if a user is still part of an orga…

13. 7.0CVE-2023-5088EPSS 0.3%2023-11-03

    A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead (potentially overwriting the VM's boot code). This could be used, for example, by L2 guests with a virtual d…

14. 8.1CVE-2022-1931EPSS 1.7%2022-05-31

    Incorrect Synchronization in GitHub repository polonel/trudesk prior to 1.2.3.