CVE-2024-20678 Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

CVE-2024-20678

Public documents in the Connected set do not provide concrete technical details (affected product, root cause, impact, or remediation) for CVE-2024-20678; monitor for updates.

CVE-2024-20678: Access of Resource Using Incompatible Type

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

PT-2024-2806 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a Remote Procedure Call Runtime Remote Code Execution problem, which is associated with accessing a resource through incompatible types. This can allow a...

PT-2024-23575 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions 2 Description: A remote code execution issue exists due to an OS command injection vulnerability in the command processing or system call components of ROS2, including External Command Execution Modules, Syst...

Microsoft Windows Remote Procedure Call Runtime security vulnerabilities

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. An attacker could exploit the vulnerability to remotely...

Improper Access Control

github.com/mattermost/mattermost-server is vulnerable to Improper Access Control. The vulnerability is due to a flaw that allows an attacker in a channel with an active call to remain in the call even after being removed from the channel...

CVE-2024-27897

Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-27897

Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-27897

Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-27897

Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-27897

An input verification vulnerability exists in the call module (telephony module) of Huawei HarmonyOS Wearables . Successful exploitation of this flaw may compromise service confidentiality . While specific affected versions are not detailed, the vulnerability is associated with Huawei HarmonyOS W...

PT-2024-23552 · Unknown · Ros Melodic Morenia

Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia versions 1 Description: An OS command injection issue has been discovered, primarily affecting command processing and system call components. This makes them susceptible to manipulation by malicious...

CVE-2024-30665

CVE-2024-30665 has been withdrawn; the initial entry states “Rejected reason: DO NOT USE THIS CANDIDATE NUMBER” and notes no evidence of a vulnerability. Connected sources (NVD, CNNVD) repeat that this candidate was withdrawn/not applicable. The PT security entry about ROS Melodic Morenia and rel...

PT-2024-22118 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: Call module affected versions not specified Description: The issue is related to an input verification vulnerability in the call module. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At the...

CVE-2024-27897: Exposure of Sensitive Information to an Unauthorized Actor

Input verification vulnerability in the call module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Mattermost Server Improper Access Control

Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel...

GHSA-XP9J-8P68-9Q93 Mattermost Server Improper Access Control

Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel...

CVE-2024-21848

Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel...

CVE-2024-21848 Users maintain access to active call after being removed from a channel

Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel...