4262 matches found
CVE-2023-36596: Untrusted Pointer Dereference
Remote Procedure Call Information Disclosure Vulnerability...
PT-2023-6147
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a component of the Windows operating system, specifically the Remote Procedure Call, which is vulnerable to information disclosure in an error data area. This could...
CVE-2021-3784 Garuda Linux Improper Authorization
Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating users from the 'Garuda settings manager', an insecure procedure is performed that keeps the created user without an assigned password during some seconds. This...
PT-2023-28357 · Netatalk +4 · Netatalk +4
Name of the Vulnerable Software and Affected Versions: Netatalk versions 3.1.x through 3.1.16 Description: A Type Confusion issue was found in the Spotlight RPC functions in afpd. The problem arises when parsing Spotlight RPC packets, specifically with a key-value style dictionary where keys are...
DEBIAN-CVE-2023-4785
Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms ex. Linux allows an attacker to cause a denial of service by initiating a significant number of connections with the server. Note that gRPC C++ Python, and Ruby are affected, but gRPC Jav...
gRPC Security Vulnerabilities
gRPC is a modern, open-source, high-performance Remote Procedure Call RPC framework from gRPC Open Source. A security vulnerability exists in gRPC version 1.23 that stems from a lack of error handling in the TCP server, allowing an attacker to cause a denial of service by initiating a large numbe...
September 12, 2023-Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5030175)
September 12, 2023-Security Only Update for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 KB5030175 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2...
The vulnerability of Google GRPC’s remote procedure call system lies in insufficient input validation and improper implementation of functions, allowing attackers to trigger service failures.
The vulnerability of Google GRPC process callouts is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
The vulnerability of Google’s gRPC remote procedure call system allows a attacker to trigger a service failure.
The vulnerability of the Google gRPC process callouts is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...
CVE-2023-41628
An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...
CVE-2023-41628
CVE-2023-41628 affects the O-RAN Software Community E2 G-Release. A vulnerability in the messaging procedure between E2Node and E2Term can allow an attacker to cause a Denial of Service (DoS). The available documents specify the issue and its impact but do not provide explicit exploit details, af...
CVE-2023-41628: Undefined Security Weakness
An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service DoS by incorrectly initiating the messaging procedure between the E2Node and E2Term components...
GHSA-8FJR-HGHR-4M99 Archive spoofing vulnerability in borgbackup
Impact A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an attacker to be able to 1. insert files with no additional headers into backups 2. gain write acce...
Spoofing
borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an...
How to delete profile at logoff without profile saved on user store
Citrix Profile Mangement is often used with a shared storage, but some environments prevent the using of shared storage, and also want to use the function of delete locally cached profiles at logff in UPM. This article tells how to achieve this goal...
Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller
Citrix ADC RCE CVE-2023-3519 Exploit Guide This document prov...
Critical Photon OS Security Update - PHSA-2023-5.0-91-0078
Updates of 'nginx', 'libarchive', 'grpc' packages of Photon OS have been released...
How to manually upgrade jQuery version on Citrix NetScaler.
How to manually upgrade jQuery version on Citrix NetScaler. ONLY WHEN ABSOLUTELY NECESSARY, THIS IS AT YOUR OWN RISK...
The vulnerability of the emulation_proc_handler function in the armv8_deprecated.c component of the Linux operating system’s kernel allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the emulationprochandler function in the armv8deprecated.c component of the Linux operating system’s kernel is related to insufficient locking mechanisms. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause servic...