Race Conditions

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions…CVE-2016-7098Gnu · 7.5% likely

   CWE-362

2. An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the new privileges, but s…CVE-2021-43411Gnu · 1.3% likely

   CWE-362

3. Race condition in signal handling routine in ftpd, allowing read/write arbitrary files.CVE-1999-0035Gnu · CVSS 5.4 · 0.8% likely

   CWE-364

4. The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that us…CVE-2009-4029Gnu · 0.5% likely

   CWE-362

5. The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition t…CVE-2012-3386Gnu · 0.5% likely

   CWE-362

6. In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows lo…CVE-2017-18018Gnu · CVSS 7.1 · 0.3% likely

   CWE-362

7. Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files…CVE-2010-1161Gnu · 0.3% likely

   CWE-362

8. fts.c in coreutils 8.4 allows local users to delete arbitrary files.CVE-2015-1865Gnu · CVSS 5.1 · 0.3% likely

   CWE-367

9. Race condition in GNU screen 4.0.3 allows local users to create or overwrite arbitrary files via a symlink attack on the /tmp/screen-exchange temporary file.CVE-2009-1215Gnu · 0.2% likely

   CWE-362

10. Race Condition in GNU SedCVE-2026-5958GNU · CVSS 2.1 · 0.1% likely

    CWE-367

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.