4264 matches found
GHSA-JV65-PF7V-F7P8 Deserialization of Untrusted Data in Hazelcast
In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code...
Halibut 资源管理错误漏洞
Halibut is a secure, RPC-based open source communication framework. Halibut version 1.2 contains a denial-of-service vulnerability that stems from a mix-up in the cleanupindex directive in index.c, which is responsible for freeing memory. An attacker could exploit this vulnerability to cause a...
May 24, 2022—KB5014021 (OS Build 20348.740) Preview
None None...
Microsoft DWM Core Library Elevation of Privilege Vulnerability (CNVD-2022-45485)
Microsoft DWM Core Library is the United States Microsoft Microsoft company's Microsoft windows get a core library. An elevation of privilege vulnerability exists in the Microsoft DWM Core Library. The vulnerability arises from an incorrect programmatic call to a high-level native procedure. An...
phpMyAdmin multiple cross-site scripting vulnerabilities
Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.3 allow remote authenticated users to inject arbitrary web script or HTML via a crafted name of 1 an event, 2 a procedure, or 3 a trigger...
Microsoft Windows Storage Spaces Controller Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Windows Storage Spaces Controller, a driver necessary to provide storage space functionality from Microsoft Corporation USA. The vulnerability stems from an incorrect program call to a high-level native procedure. An attacker could explo...
The vulnerability of the Advanced Local Procedure Call (ALPC) handler in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the Advanced Local Procedure Call ALPC in the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Microsoft Windows Print Spooler Components Elevation of Privilege Vulnerability (CNVD-2022-70056)
An elevation of privilege vulnerability exists in Microsoft Windows Print Spooler Components, a print backend processor component of Microsoft Corporation USA. The vulnerability stems from an incorrect program call to a high-level native procedure. An attacker could exploit this vulnerability to...
Microsoft Windows Remote Procedure Call Runtime Remote Code Execution Vulnerability
Microsoft Windows Remote Procedure Call Runtime is a technology used to create distributed client/server programs from Microsoft Corporation USA.Microsoft Windows Remote Procedure Call Runtime is vulnerable to remote code execution vulnerability. The vulnerability stems from the failure of a...
OESA-2022-1634 mysql5 security update
MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and many different client programs and libraries. The base package contains the standard MySQL client programs and generic MySQL files. Security Fixes:...
CVE-2022-22019
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-22019
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-23279
Windows ALPC Elevation of Privilege Vulnerability...
CVE-2022-22019
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
Remote code execution
Remote Procedure Call Runtime Remote Code Execution Vulnerability...
CVE-2022-22019
Technical details for CVE-2022-22019 are not provided in the connected documents. Public details (affected products, exploit info, impact, remediation) are not present here. Monitor for official updates.
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
PT-2022-2647 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient input validation in the Remote Procedure Call Runtime. This can be exploited by a remote attacker to execute arbitrary code. Recommendations: ...
PT-2022-2446 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows operating system, specifically concerning the Advanced Local Procedure Call ALPC handler. It involves...
