AZL-7345 CVE-2018-1050 affecting package samba for versions less than 4.12.5-6

All versions of Samba from 4.0.0 onwards are vulnerable to a denial of service attack when the RPC spoolss service is configured to be run as an external daemon. Missing input sanitization checks on some of the input parameters to spoolss RPC calls could cause the print spooler service to crash...

Electrum Technologies GmbH Electrum Bitcoin Wallet Information Disclosure Vulnerability

Electrum Technologies GmbH Electrum Bitcoin Wallet is a lightweight bitcoin wallet software. A security vulnerability exists in the JSONRPC interface in Electrum Technologies GmbH Electrum Bitcoin Wallet versions prior to 3.0.5. An attacker could exploit this vulnerability to steal bitcoins...

UBUNTU-CVE-2018-7333

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-rpcrdma.c had an infinite loop that was addressed by validating a chunk size...

eQ-3 AG HomeMatic CCU2 Open XML-RPC Port Vulnerability

The eQ-3 AG Homematic CCU2 is a central control unit for controlling smart home devices from eQ-3 Germany. A security vulnerability exists in the eQ-3 AG HomeMatic CCU2 version 2.29.22. An attacker can exploit the vulnerability by sending arbitrary XML-RPC requests to control attached BidCos...

Quest NetVault Backup checksession authentication bypass vulnerability

Quest NetVault Backup is a scalable data backup and recovery solution for organizations with multiple IT environments. A checksession authentication bypass vulnerability exists in JSON RPC Request handling in Quest NetVault Backup 11.2.0.13. An attacker can exploit this vulnerability to execute...

PT-2018-5358 · Ethereum · Cpp-Ethereum

Name of the Vulnerable Software and Affected Versions: cpp-ethereum version affected versions not specified Description: An improper authorization issue exists in the miner start API endpoint of cpp-ethereum's JSON-RPC. This allows a JSON request to access restricted functionality, resulting in...

PT-2018-5355 · Ethereum · Cpp-Ethereum

Name of the Vulnerable Software and Affected Versions: cpp-ethereum version affected versions not specified Description: An issue exists in the admin peers API of cpp-ethereum's JSON-RPC, where a JSON request can bypass authorization, allowing access to restricted functionality. An attacker can...

January 18, 2018—KB4073291 (OS Build 16299.201)

None None...

USN-3533-1 transmission vulnerability

It was discovered that Transmission incorrectly handled certain POST requests to the RPC server and allowed DNS rebinding attack. An attacker could possibly use this issue to execute arbitrary code...

CPP-Ethereum JSON-RPC Security Bypass Vulnerability

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. A security bypass vulnerability exists in the adminaddPeer API for JSON-RPC in CPP-Ethereum commit version...

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02798)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minersetGasPrice API for JSON-RPC in the CPP-Ethereum commit...

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02799)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minerstart API for JSON-RPC in CPP-Ethereum commit version...

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02797)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the minersetEtherbase API for JSON-RPC in CPP-Ethereum commit version...

Parity Ethereum client JSON-RPC misconfiguration vulnerability

Parity Ethereum client is a client for Ethereum the application runtime platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. A misconfiguration vulnerability exists in JSON-RPC in Parity Ethereum client version 1.7.8. An attacker can use this vulnerability to sen...

CPP-Ethereum JSON-RPC Incorrect Authorization Vulnerability (CNVD-2018-02796)

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol. An incorrect authorization vulnerability exists in the adminpeers API for JSON-RPC in CPP-Ethereum commit version...

CPP-Ethereum JSON-RPC Denial of Service Vulnerability

CPP-Ethereum is a C++ client for Ethereum Application Programming Platform.JSON-RPC is one of the remote invocation services using JSON as the protocol.APIs are the interfaces. A denial of service vulnerability exists in the APIs for JSON-RPC in CPP-Ethereum commit version...

Microsoft Windows RPC Remote Code Execution Vulnerability

Microsoft Windows is a popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows RPC, which can be exploited by a remote attacker to execute arbitrary code due to improper handling of requests by the Remote Access Service...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2017-32489)

The Cisco Network Convergence System NCS 5500 Series Routers are a series of 5500 Series routers from Cisco, Inc.IOS XR Software is one of the modular, distributed network operating systems. A denial of service vulnerability exists in the gRPC code of the IOS XR Software in Cisco NCS 5500 Series...

CVE-2017-14652

SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject arbitrary SQL commands via an XML-RPC encoded document sent as part of the user registration process...

CVE-2017-14615

An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if JavaScript code, properly encoded to be consumed by XML parsers, is embedded as value of the user element, the code will be rendered in the...