SAP SLT Remote Function Call RCE

The vulnerability of the Remote Function Call interface of the SAP Landscape Transformation SLT software tool is related to improper code generation. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, execute arbitrary code, and gain full control over the syst...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001083)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001083 advisory. Race condition in the queuedelete function in sound/core/seq/seqqueue.c in the Linux kernel before 4.4.1 allows local users to cause a denial of service use-after-fr...

MiracleLinux 3 : krb5-1.6.1-17AXS3.1 (AXSA:2008-153:02)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-153:02 advisory. Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of...

MiracleLinux 3 : samba-3.0.33-3.39.0.1.AXS3 (AXSA:2012-537:02)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-537:02 advisory. Samba is the suite of programs by which a lot of PC-related machines share files, printers, and other information such as lists of available files and printer...

openc3-api Vulnerable to Unauthenticated Remote Code Execution

Summary OpenC3 COSMOS contains a critical remote code execution vulnerability reachable through the JSON-RPC API. When a JSON-RPC request uses the string form of certain APIs, attacker-controlled parameter text is parsed into values using Stringconverttovalue. For array-like inputs, converttovalu...

CVE-2025-68271 Unauthenticated Remote Code Execution in openc3-api

OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.0 to 6.10.1, OpenC3 COSMOS contains a critical remote code execution vulnerability reachable through the JSON-RPC API. When a JSON-RPC request uses the string form of...

CVE-2026-20832

Windows Remote Procedure Call Interface Definition Language IDL Elevation of Privilege Vulnerability...

CVE-2026-20832

Windows Remote Procedure Call Interface Definition Language IDL Elevation of Privilege Vulnerability...

CVE-2026-20821

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally...

CVE-2026-20821

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally...

CVE-2026-20832 Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

...

CVE-2026-20832 Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege Vulnerability

...

CVE-2026-20832

CVE-2026-20832 is a Windows component vulnerability described as a Windows Remote Procedure Call Interface Definition Language (IDL) Elevation of Privilege. Connected documents confirm the flaw affects the Windows RPC IDL handling, enabling local privilege escalation with high impact. The vulnera...

CVE-2026-20821 Remote Procedure Call Information Disclosure Vulnerability

...

CVE-2026-20821

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally...

CVE-2026-20821

CVE-2026-20821 is a Windows Remote Procedure Call information disclosure vulnerability that could allow a local attacker to obtain sensitive data. The available description confirms an information disclosure resulting from RPC handling, but the connected documents do not provide vendor-specific p...

CVE-2026-20821 Remote Procedure Call Information Disclosure Vulnerability

...

CVE-2025-8090

Null pointer dereference in the MsgRegisterEvent system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel...

CVE-2025-8090 Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety

Null pointer dereference in the MsgRegisterEvent system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel...

CVE-2025-8090 Vulnerability in the QNX Neutrino Kernel impacts the QNX Software Development Platform and QNX OS for Safety

Null pointer dereference in the MsgRegisterEvent system call could allow an attacker with local access and code execution abilities to crash the QNX Neutrino kernel...