36 matches found
PT-2024-29953 · Veeam · Veeam Backup & Replication
Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: A vulnerability in Veeam Backup & Replication allows a low-privileged user to start an agent remotely in server mode and obtain credentials, effectively escalating...
SUSE CVE-2020-29362
An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When the remote entity supplies a byte array through a serialized PKCS11 function call, the receiving...
Xiaomi SmartHome APP Information Disclosure Vulnerability
Xiaomi SmartHome APP is an app from Chinese company Xiaomi Xiaomi to manage Xiaomi smart home products. Xiaomi SmartHome APP suffers from an information leakage vulnerability, which originates from remote calls to some interfaces and can be exploited by attackers to obtain sensitive information...
Xiaomi SmartHome APP 信息泄露漏洞
Xiaomi SmartHome APP is an app from Chinese company Xiaomi Xiaomi to manage Xiaomi smart home products. Xiaomi SmartHome APP suffers from an information leakage vulnerability, which originates from remote calls to some interfaces and can be exploited by attackers to obtain sensitive information...
PYSEC-2022-42973
Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes...
Lark Technologies: RPC Implementation allows unauthenticated remote calls
It was found that the RPC implementation via postMessage within Lark did not check origin, so an attacker could have potentially performed RPC calls on behalf of a user. We thank @mike12 for reporting this to our team and confirming the resolution...
The vulnerability of the rpcss.dll library in the Windows operating system allows attackers to escalate their privileges.
The vulnerability of the rpcss.dll library in the Windows operating system is related to errors in processing RPC requests. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
CVE-2018-1002161
SQL injection in multiple remote calls...
UBUNTU-CVE-2018-1002161
SQL injection in multiple remote calls...
CVE-2018-7301
eQ-3 AG HomeMatic CCU2 2.29.22 devices have an open XML-RPC port without authentication. This can be exploited by sending arbitrary XML-RPC requests to control the attached BidCos devices...
The vulnerability of the iOS operating system, which allows a perpetrator to make phone calls to arbitrary numbers
The vulnerability of the Quick Look component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to make phone calls to arbitrary numbers remotely...
The vulnerability of the Linter Bastion database management system allows a malicious individual to execute arbitrary code with system privileges or to disrupt the operation of the program.
In the procedure “sub4101B4”, there is no validation of the correctness of the input data at addresses “0x004104D1”, “0x004105AB”, and “0x004105EA”. This may lead to buffer overflows during the processing of RPC calls numbered 0x13 and 0x12 “0x0040C73C”. This vulnerability allows a malicious...
Fedora Update for librapi FEDORA-2008-0680
Check for the Version of librapi OpenVAS Vulnerability Test Fedora Update for librapi FEDORA-2008-0680 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 8 Update: librapi-0.11-1.fc8
The RAPI library is an open source implementation that works like RAPI.DLL, available on Microsoft operating systems. The library makes it possible to make remote calls to a computer running Pocket PC. In order to use librapi, a daemon that the Pocket PC client connects to mus t be running on the...
DNS RPC analysis-vulnerability warning-the black bar safety net
Author: cloud Shu Date: 2007-04-27 http://www.ph4nt0m.org According to the security Bulletin for the vulnerability description, vulnerability occurs in the dns. exe program in the DnssrvQuery Function, This function is an RPC function, allows clients to make remote calls. First with IDA on dns. e...
