2195 matches found
The vulnerability of the Kernel component of the Solaris operating system, which allows a hacker to trigger a service failure
The vulnerability of the Kernel component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures through RPC calls...
cobbler elevation of privilege vulnerability
Cobbler is a Linux installation server that allows you to quickly set up a network installation environment. An elevation of privilege vulnerability exists in cobbler 2.6.x. The vulnerability stems from the fact that cobbler exposes all functions of the CobblerXMLRPCInterface class via XMLRPC. A...
UBUNTU-CVE-2018-10931
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon...
cobbler: CobblerXMLRPCInterface exports all its methods over XMLRPC
An API-exposure flaw was found in cobbler, where it exported CobblerXMLRPCInterface private functions over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain important privileges within cobbler, as well as upload files to an arbitrary location in the daemon context...
Microsoft Windows: Restrict Unauthenticated RPC clients
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winunauthrpcclient.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Restrict Unauthenticated RPC clients Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program ...
CVE-2014-8420
creationtimestamp| type| source ---|---|--- 2018-07-30 19:24:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/sonicwall/sonicwallxmlrpcrce.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...
The vulnerability of the NAS Device Addition component in the Solaris Cluster software allows a hacker to gain full control over the application.
The vulnerability of the NAS Device Addition component in the Solaris Cluster software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full control over the application using the RPC network protocol...
CVE-2018-2908
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the vulnerability is in Solari...
samba: NULL pointer dereference in printer server process
A null pointer dereference flaw was found in Samba RPC external printer service. An attacker could use this flaw to cause the printer spooler service to crash...
Microsoft Windows: Service: Remote Procedure Call (RPC) Locator
This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrpclocator.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Remote Procedure Call RPC Locator RpcLocator Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progr...
Hackers Stole Over $20 Million in Ethereum from Insecurely Configured Clients
Security researchers have been warning about cybercriminals who have made over 20 million dollars in just past few months by hijacking insecurely configured Ethereum nodes exposed on the Internet. Qihoo 360 Netlab in March tweeted about a group of cybercriminals who were scanning the Internet for...
CVE-2018-2718
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful attacks of this...
Oracle Sun Solaris has an unspecified vulnerability (CNVD-2018-09045)
Oracle Sun Solaris is a Unix operating system originally developed by Sun Microsystems. An unspecified vulnerability exists in the RPC component of Oracle Sun Solaris. An attacker could exploit this vulnerability to affect availability...
April 17, 2018—KB4093121 (Preview of Monthly Rollup)
None None...
Twonky Server Directory Traversal Vulnerability
Twonky Server is the industry-leading DLNA/UPnP media server from Lynx Technology that enables the sharing of media content between connected devices. A directory traversal vulnerability exists in Twonky Server. A remote attacker could use the contentbase parameter of rpc/setall in the ... double...
PT-2018-1119 · Siemens · Simatic Route Control +7
Name of the Vulnerable Software and Affected Versions: OpenPCS 7 versions V7.1 through V8.2, V9.0 through V9.0 Upd1 SIMATIC BATCH versions V7.1 through V8.2, V9.0 through V9.0 SP1 SIMATIC NET PC Software versions V14 through V14 SP1 Update 14, V15 through 15 SP1 SIMATIC PCS 7 versions V7.1 throug...
The vulnerability of the Samba networking communication package lies in the lack of input data validation, which allows attackers to trigger a service failure.
The vulnerability of the Samba networking communication package is related to the lack of input data validation during RPC spoolss calls if RPC spoolss is configured to run as an external daemon. Exploiting this vulnerability allows a malicious actor to cause a failure in the print queue manager’...
AZL-7345 CVE-2018-1050 affecting package samba for versions less than 4.12.5-6
All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...
Electrum Technologies GmbH Electrum Bitcoin Wallet Information Disclosure Vulnerability
Electrum Technologies GmbH Electrum Bitcoin Wallet is a lightweight bitcoin wallet software. A security vulnerability exists in the JSONRPC interface in Electrum Technologies GmbH Electrum Bitcoin Wallet versions prior to 3.0.5. An attacker could exploit this vulnerability to steal bitcoins...